Privacy, in plain English.

Google Analytics runs on every page here from 4 September 2026. It records which pages you look at, roughly where in the world you are, which browser and device you are on, and how you arrived.

It sets two cookies in your browser, named _ga and _ga_DZVST7474P, and that is how it tells a returning visit from a new one. Until that date this page said there was no analytics here.

That was true when it was written, it stopped being true the day the tag went on, and the page was rewritten rather than left standing.

This site is served through Cloudflare, and Cloudflare’s own Web Analytics runs a small script on every page. It sets no cookies and writes nothing to your browser’s storage, which we checked in a browser rather than taking Cloudflare’s word for it.

We found it by opening the developer tools on our own site. It is on because Cloudflare enables it for free domains by default, we have left it on, and we would rather write that down than tidy it away.

None of this runs on the client area. Those pages are built differently and carry no analytics, no tag manager and no beacon, because a client reading their own dashboard is not traffic and we have no business counting it.

Google Tag Manager was installed on 4 September 2026. It is a loader: it lets us add or remove measurement without editing this website, so something could start running here without a word of this page changing and without anybody redeploying anything.

That is the honest weakness of any “here is the whole list” promise on a site that uses one, and we would rather name it than let the list quietly go stale. The list above is what was actually running on the date beside it.

If you want to know what is running right now, the network tab in your own browser is a better authority than this paragraph.

The form at the foot of the sector pages and the other pages that carry it asks for your first and last name, your business, its website if it has one, your email and, from 27 September 2026, your mobile number, how you heard about us, and a tick to say we may contact you and send you Hype or help, the AI newsletter for small businesses, every fortnight. When you press the button it goes to Brevo, the email service we use, at sibforms.com, and Brevo stores it so that we can reply and send you that email; the unsubscribe link in every edition takes you off the list, with no login.

The form’s script and stylesheet also load from sibforms.com on every page that carries it, so Brevo receives your IP address and browser details when those pages load, whether or not you fill anything in. The contact page’s form, from 26 September 2026, sends to Brevo the same way: your first and last name, your business, your email, a phone number if you give one, your message, how you heard about us, and the tick.

Google, several times over: the typeface from fonts.googleapis.com and fonts.gstatic.com, the tag from googletagmanager.com, and the measurements themselves to analytics.google.com. Analytics also calls stats.g.doubleclick.net and google.com.au, which are Google’s advertising addresses.

Then Cloudflare, which serves every page and runs its own beacon. Then Brevo, from 9 September 2026, whose sibforms.com serves the booking and contact forms’ script and stylesheet on every page that carries one, and whose static.brevo.com serves the list of countries for the phone box, on the contact page from 26 September 2026 and on every page with the booking form from 27 September 2026.

All three companies receive your IP address and your browser details when such a page loads. Counted in a browser on 4 and 9 September 2026, and again on 26 September 2026, when the Analytics addresses had changed from the ones this page named.

You can check it yourself, and you should rather than take our word for it: open your developer tools, look at the network tab, and every request this page makes is sitting there.

The homepage, the About page and the Contact page show a map of the area, loaded from www.google.com, maps.googleapis.com and maps.gstatic.com when you scroll to it. Google receives your IP address and your browser details on those pages as the map loads, from three more Google addresses beside the ones above.

Google publishes a browser add-on that stops Analytics collecting anything about you, here and on every other site, at tools.google.com/dlpage/gaoptout. Most browsers also have a tracking-protection setting that blocks it outright.

Blocking it changes nothing about how this site works for you, and there is no banner here asking you to accept anything.

Obviously. We keep it while there is a live conversation and for as long as we are working together, and we delete it on request.

We do not add you to a mailing list, we do not sell or share it, and there is no follow-up sequence. If you ask what we hold about you, you get a straight answer within a few days.

Before any work starts, the one-page scope lists which accounts and which data we may access and what for. Nothing outside that gets touched.

At the end of an engagement we delete what we hold on request and confirm in writing that we have.

Where a project involves personal information about your customers or staff, it goes only through AI accounts whose terms say they are not used for training: the business API, or your own business account. If we cannot tell you where a piece of your data goes, it does not go there.