Birchwell Digital / INFORMATION
Privacy notice
Who is responsible
Birchwell Associates Ltd operates Birchwell Digital. Our address is 37 Shadow Moss Road, Moss Nook, Wythenshawe, Manchester, United Kingdom, M22 0LQ. Company number: 15480791. Contact us about privacy at [email protected].
What this website does
Enquiries can be submitted through the project form. The CRM demonstration uses fictional records held in page memory; it is separate from our internal CRM. The project device previews display website imagery.
Information we handle
If enquiry sending is enabled, we receive your name, email address, optional business name, selected service, budget and timescale, and project message. Please do not include passwords, sensitive personal information or confidential customer records.
Our hosting and security providers also process technical information such as IP addresses, request details and security-check results. When our form backend is enabled, it uses a salted hash of an IP address for abuse controls, and a submission reference and content hash to prevent duplicate delivery. The abuse database does not store the enquiry text or contact details.
Why we use it
We use enquiries to respond to requests, discuss a project and, where appropriate, take steps towards a contract. For enquiries about a contract with you, the basis may be pre-contractual steps at your request; for business contact handling and protecting our service, we rely on legitimate interests, subject to your rights. We do not enrol enquiry senders in marketing lists. Optional tracking, if introduced, will require a separate review and appropriate choices.
Providers and sharing
Cloudflare hosts the website. When enabled, Cloudflare Turnstile verifies form submissions, Cloudflare D1 holds limited abuse-control records, Resend delivers enquiry emails, and Microsoft 365 (Outlook) stores them in our business mailbox. We may also disclose information when legally required. We do not sell enquiry information.
International processing
Cloudflare, Resend and Microsoft operate internationally and may process information outside the United Kingdom, including in the United States. Selecting Ireland for email sending does not mean all processing remains in Ireland. Their data-processing terms describe applicable transfer safeguards, including standard contractual clauses and UK transfer provisions where applicable. Contact us for information about the safeguards relevant to your enquiry
How long we keep information
Enquiries: We review unsuccessful enquiries 12 months after the last meaningful contact and delete information that is no longer needed. This is a manual review policy, not automatic deletion of CRM records. If an enquiry becomes a client relationship, relevant records are retained under our client and business-record retention arrangements, which we explain when a client relationship begins.
When the backend is enabled, abuse buckets become eligible for deletion after approximately an hour; delivery-control records after 24 hours. Cleanup runs on subsequent form requests, so records can remain longer during inactivity. Provider security logs are subject to the relevant provider’s retention arrangements.
Your saved cookie preference expires after 180 days and is stored on your device, rather than in our enquiry database.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it. Contact [email protected]. We may need to verify a request before acting on it.
You can complain to the Information Commissioner’s Office. We would welcome the opportunity to address a concern first.
Cookies and changes
See our cookie information for browser storage and preference controls. We will update this notice when our handling of information changes.