Privacy policy
What we collect, and why
- Analytics: first-party, cookieless and aggregate. We measure pages, referrers, device class and tool usage server-side; no cookies are set for measurement, no identifiers are stored, and nothing is shared with third parties. This is why this site shows no cookie banner: there is nothing to consent to.
- Enquiry forms: if you send an enquiry, we store the details you enter (with a timestamp and the page you sent it from) to answer it and, where you ask us to, to pass it to a relevant provider. The lawful basis is your consent, recorded with the form; the privacy-notice version you saw is stored with it.
- Email: replies to enquiries are stored with the enquiry.
Where it lives, and for how long
- All personal data is stored in the EU (Cloudflare EU jurisdiction storage).
- Enquiries: 24 months from when you send them, then deleted. Any copy held to pass your enquiry to a firm has your name, email, phone and message removed at the same point.
- Raw inbound email: 12 months, then deleted.
- Consent records (which form, the wording you agreed to, and when): kept for 6 years after the enquiry is deleted, as evidence of the lawful basis, then deleted.
- Aggregate, anonymous analytics: kept indefinitely (they identify no one).
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, at any time: email enquiries@smevaluation.co.uk with the address you used. We respond within one month. You can complain to the Office of the Information and Data Protection Commissioner (idpc.org.mt), or to the data protection authority in the EU country where you live or work.
Sharing
If you send an enquiry, it is read and answered by Joseph Ellul, who runs this site. We do not pass it to anyone else. We use service providers to host and store this site and its data, to route email, and to help us read and answer enquiries, including AI tools. We never sell data, run third-party advertising, or load third-party scripts on this site.