Privacy Policy
Last updated 11 September 2026. This describes what the site actually does, so it is short.
Who is responsible for your data
This site is operated by FULKRAM LTD, a company registered in England and Wales under number 17405539, registered office 20 Wenlock Road, London, N1 7GU. For UK data protection law, FULKRAM LTD is the data controller for personal data collected through this site.
For any privacy question or request, use the contact form or write to the registered office above.
What this site collects
The forms (contact, and the free challenge form) collect what you type into them: the name you give, the contact detail you give, your message, and, if you choose to say, how you heard about us and what matters most to you. We also note which page you sent it from and the website that sent you there (the site's name only, never the full address). It is kept in a database we control, so an enquiry isn't lost if an email fails.
The newsletter box on the challenge form is unticked unless you tick it. If you do, we keep that choice, the exact words you agreed to, and when. Reply to any email from us to be taken off.
Stopping abuse of the forms. To limit how many messages one place can send, the form keeps a scrambled, salted code made from your IP address for up to two days. The IP address itself is never stored.
Page-view counts. The site uses Vercel Web Analytics to count visits, and also counts them itself. Neither sets cookies or stores anything in your browser. A visit is attributed to a code that changes every day and can't be traced back to you. We see which pages are read, the site you came from, roughly where from (country), and on what kind of device. No IP address is stored, nobody is profiled, and no data is sold.
Private demo pages are the one exception. A demo we build for a specific recipient notifies us when it is opened: the time, the device type, an approximate city, and how long the page was read. That notification is sent to us once and not stored in any database, and those pages still set no cookies and store nothing in your browser.
Server logs. The site is hosted by Vercel, which keeps standard technical logs of requests, including IP address, for security and reliability.
Embedded video. Some pages embed video hosted by Vimeo, loaded with Do Not Track enabled. Vimeo still receives the technical request needed to serve the video and sets a security cookie of its own (__cf_bm). That cookie is set and controlled by Vimeo under Vimeo's own privacy policy.
Why, and on what legal basis
| Data | Purpose | Lawful basis (UK GDPR) |
|---|---|---|
| Form entries | To read and reply to your enquiry and discuss possible work | Art. 6(1)(b), steps prior to a contract; Art. 6(1)(f), legitimate interests |
| Newsletter choice | To send the occasional email you asked for | Art. 6(1)(a), consent, which you can withdraw at any time |
| Page-view counts, form abuse code | Knowing which pages help, and keeping the forms usable | Art. 6(1)(f), legitimate interests |
| Server logs | Security, abuse prevention, keeping the site running | Art. 6(1)(f), legitimate interests |
Who else sees it
| Provider | What it does |
|---|---|
| Vercel | Hosts the site and runs the contact form endpoint |
| Neon | Hosts the database that stores form entries and page-view counts |
| Resend | Delivers the form submission to us by email |
| Telegram | Sends a notification of the enquiry so it is not missed |
| Vimeo | Hosts embedded videos, with Do Not Track enabled |
Some of these providers store data in the United States. Transfers rely on the UK Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU-US Data Privacy Framework.
How long it is kept
Enquiries are kept while the conversation is live. If it doesn't turn into work, they're deleted 12 months after the last message. Page-view counts carry nothing that identifies you and are kept for 24 months. The form abuse code is deleted after two days. If we work together, engagement records are kept for 6 years from the end of the engagement, as UK tax and contract record-keeping requires. You can ask for your enquiry to be deleted sooner at any time.
Your rights
You can ask what personal data is held about you, have it corrected or erased, restrict or object to its use, and receive it in a portable format. Use the contact form or write to the registered office. No charge, response within one month. If you are unhappy with the handling, you can complain to the Information Commissioner's Office.