← estiba.io

Privacy notice

3 October 2026

This explains what happens to the details you send me through this website. It is written to be read rather than to be survived, and it is short because very little happens to them.

Who is responsible

Estiba Limited, a company registered in England and Wales, number 08660761. Estiba is the data controller for anything you send through this site. Our registered office is on the public register at Companies House.

For anything about this notice, or to exercise any of the rights below, write to [email protected]. I read that address myself.

What I collect, and only when you send it

There is one form on this site. If you fill it in, it sends me:

Nothing else is collected. I do not ask for, want, or have any way of receiving payment details, identification documents, or anything about your staff or your customers.

Why, and on what basis

I use it to reply to you, and to carry on the conversation if there is one to carry on. That is all.

The lawful basis is legitimate interests — you chose to send me an enquiry, and replying to it is the obvious and expected use of what you sent. I have considered whether this could surprise or disadvantage you and concluded that it could not, because the only thing I do with it is the thing you asked for. If a working relationship follows, the basis becomes the performance of that contract.

I do not send marketing. There is no mailing list. Your details are never sold, rented, shared for anyone else's purposes, or used to build a profile of you, and no decision about you is made by any automated means.

Who else can see it

Two service providers handle it on my behalf, both under contract and neither permitted to use it for their own purposes:

Both are United States companies, so your details are transferred outside the United Kingdom. Each provides contractual safeguards for those transfers under its data processing terms, and you can ask me for details.

Separately, and whether or not you ever fill in the form: the typefaces on this site are loaded from Google Fonts when the page opens. That means your browser contacts Google's servers and Google sees your IP address. I mention it because it is true, not because I think it is significant, and I would rather disclose it than have you find it.

Nobody else receives your details. I would disclose them if the law required it, and that has never happened.

How long I keep it

If nothing comes of the conversation, I delete your details within twelve months of our last contact — from the form store at Netlify and from my mailbox.

If we end up working together, I keep what relates to that for as long as we are working together and for six years afterwards, which is the period during which a claim about a contract could still be brought in England.

You can ask me to delete it sooner, and I will.

Cookies, tracking and analytics

There are none. This site sets no cookies, stores nothing in your browser, and carries no analytics, no advertising, no tracking pixels and no social media scripts. I do not know how many people visit, which pages they read, or where they came from — and that is a deliberate choice, not an oversight.

This is why you have not been asked to accept anything.

Your rights

Under UK data protection law you can ask me to:

Write to [email protected] and I will answer within one month, usually a great deal sooner. There is no charge.

If you are not satisfied with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you came to me first, but you do not have to.

Changes

If this notice changes, the date at the top changes with it. There is no archive of previous versions; if you want to know what it said before, ask me.


Estiba Limited · Registered in England & Wales · Company 08660761 · [email protected]