Your information
Privacy notice
Last updated 21 September 2026
1. Who controls your information
Zak Spike Rodwell trading as Client Harbour, a sole trader, is the controller for the personal information described here.
Business establishment address: 38 High RD, Gorleston, Norfolk, NR31 0PJ, UK
Questions and data requests can be sent to [email protected].
2. Information we collect
When you use the enquiry form or contact us, we may collect your name, business name, email address, phone number, current website or social page, and anything you write in your message.
If you arrive through a campaign link, the form also records the values labelled utm_source, utm_medium and utm_campaign. These tell us which advert or link led to the enquiry. They do not identify you until you choose to send the form.
If you become a customer, we also keep project messages, instructions, approvals, invoices, payment records and the access details needed to provide the service. We avoid storing passwords in ordinary email wherever a safer method is available.
3. Why we use it
- To answer enquiries and prepare a requested homepage concept.
- To agree, build, host and support a website.
- To manage payments, accounts and legal records.
- To understand which of our own adverts and links produce enquiries.
- To protect our forms and services from abuse.
We rely on steps taken at your request before a contract, performance of a contract, compliance with legal duties and our legitimate interests in running and improving the business. We use consent where the law specifically requires it.
4. Services that help us operate
Cloudflare hosts the website and the enquiry form. It processes technical information such as IP addresses and request details to deliver and protect those services.
Resend sends form notifications. Gmail receives and stores business email sent to [email protected]. Stripe hosts our subscription checkout and processes recurring payments. It collects the payment and business details needed for checkout, records acceptance of the subscription terms and shares subscription status and payment records with us. We do not receive or store full card details. Those providers handle information under their own security and privacy terms.
We use AI-assisted tools, including OpenAI, to help with business correspondence, drafting and website work. Relevant messages and project information may be processed by those tools. Do not send passwords, card details or sensitive personal information through the enquiry form. We may also use suppliers such as a domain registrar where a project needs them.
5. Traffic measurement
The public website currently has no visitor analytics script or advertising pixel. Campaign details submitted with the enquiry form are stored with that enquiry. Hosting and security services may retain technical request records; these are separate from advertising tracking.
6. How long we keep information
We normally delete unsuccessful enquiry records after 24 months. Customer project records are kept while we provide the service and for up to seven years afterwards where they form part of our tax, payment or contract records. We may keep information longer when a legal claim or dispute requires it.
7. International processing
Some service providers process data outside the United Kingdom. Where that happens, we use providers that apply recognised transfer safeguards or another lawful transfer mechanism.
8. Your rights
Depending on the circumstances, you can ask for a copy of your personal information, ask us to correct or delete it, restrict or object to its use, or ask for information you supplied in a portable format. You can also withdraw consent where consent is the basis for use.
Email [email protected] to make a request. We may need to confirm your identity. You can complain to the UK Information Commissioner's Office at ico.org.uk.
9. Security
We limit access to business systems, use protected accounts and keep software up to date. No internet service can promise complete security, but we take reasonable steps to reduce the risk of loss, misuse and unauthorised access.
10. Changes
We update this notice when our services or legal duties change. The latest version is published on this page with its update date.