Who I am
EdgerTech is the trading name of Timothy Edgerton, a sole trader based in Winchester, Hampshire. I build booking and operations software and websites for estates and heritage businesses.
For the personal data described on this page I am the data controller. EdgerTech is registered with the Information Commissioner's Office, registration number ZC204569.
For anything to do with your data, email enquiries@edgertech.co.uk.
The short version
- I collect only what I need to reply to you, do the work and keep proper business records.
- This website has no analytics, no advertising and no tracking cookies.
- I never sell personal data or pass it on for someone else's marketing.
- You can ask me what I hold about you, and ask me to correct or delete it.
What I collect and why
When you visit this website
The company that hosts this site records technical details of each visit: your IP address, browser type, the page requested and the time. This is used to deliver the site and keep it secure. I do not use it to identify you or to build a profile of you.
Legal basis: legitimate interests (running a secure website)
When you get in touch
If you email or call me, I keep your name, contact details, the business you work for and what you tell me. I use it to reply and to work out whether I can help.
Legal basis: legitimate interests, or steps taken at your request before a contract
When you use the enquiry form
The form on the contact page collects your name, email address, and anything else you choose to give: phone number, business name, type of business and your message. It is delivered to my email by a form service, Web3Forms. I treat it the same way as an email enquiry.
Legal basis: legitimate interests, or steps taken at your request before a contract
When you become a client
I hold your contact details, the agreed scope, our correspondence, invoices and payment records. During an audit or a build I also see information about how your business runs, and sometimes logins you give me for your website, domain or other systems so I can do the work.
Legal basis: contract, and legal obligation for tax and accounting records
When I contact you about my services
I sometimes write to owners and managers of businesses I think I could help. I use your name, role and business contact details, taken from public sources such as your own website and LinkedIn. Every message is written to one person. If you tell me to stop, I stop, and I keep only a note not to contact you again.
Legal basis: legitimate interests (finding clients for a small business)
When you ask for my emails
If you have agreed to hear from EdgerTech by email, I hold your name and email address for that purpose. Every email has an unsubscribe link.
Legal basis: consent, which you can withdraw at any time
Reviews and case studies
I publish a client's name, words or screenshots only with that client's permission, and I remove them if asked.
Legal basis: consent
I do not ask for sensitive personal data, such as health information, and I do not make automated decisions about anyone.
Systems I build and look after for clients
When I build or host a booking system or website for a client, that system holds data about the client's own customers. The client decides what is collected and why, and is the data controller. I handle that data only on the client's instructions, under a written agreement, to build, host and support the system.
If you are a customer of one of my clients, their privacy notice applies to your data, and they are the right people to contact first. If you write to me, I will pass your request to them.
Who I share data with
I use a small number of suppliers to run the business. They handle data on my behalf and only for the job they do:
- Cloudflare, which hosts this website and manages the domain.
- Google, which provides my business email and document storage.
- Web3Forms, which delivers messages from the enquiry form to my email.
- Accounting, banking and payment services, for invoices and payments.
I may also share data with my accountant, insurer or legal adviser where they need it, and with HMRC, the ICO, the police or a court where the law requires it.
Data held outside the UK
Some of these suppliers store or process data outside the UK, including in the United States. Where that happens, the transfer is covered by safeguards recognised in UK law, such as the UK extension to the EU-US Data Privacy Framework or the standard contract terms approved by the ICO.
How long I keep it
- Enquiries that do not lead to work: up to 12 months after our last contact.
- Contacts I have approached about my services: up to 12 months after our last contact, or until you ask me to stop.
- Client records, contracts and correspondence: for as long as we work together and six years afterwards.
- Invoices and accounting records: at least six years, as tax law requires.
- Logins you give me for your systems: deleted when the work that needed them is finished.
- Email list: until you unsubscribe.
How I keep it safe
Data is held in password-protected accounts with two-step sign-in, on encrypted devices. Only I have access. If a data breach ever put you at risk, I would tell you and the ICO as the law requires.
Cookies
This website sets no analytics or advertising cookies, so there is no cookie banner. The hosting company may set a cookie that is strictly necessary for security, such as telling real visitors from automated attacks.
Links on this site to other websites, such as LinkedIn or Echo, take you to sites with their own privacy policies.
Your rights
Under UK data protection law you can ask me to:
- tell you what data I hold about you and give you a copy;
- correct anything that is wrong or incomplete;
- delete your data, where I have no legal reason to keep it;
- stop or limit how I use it, including any marketing;
- give you your data in a form you can take elsewhere;
- withdraw consent you have given.
Email enquiries@edgertech.co.uk. There is no charge, and I will reply within one month. I may need to confirm who you are first.
If you are not happy
Tell me first and I will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
If I change how I handle personal data, I will update this page and the date at the top.