Privacy.

1. Who controls your data.

The data controller is Alex Harvey, trading as More Than Normal.

2. What we collect, and why.

Only what is needed to answer you, deliver the work, and keep the site up.

A. Enquiries

The contact form collects your name and email address. It also takes your business or current website, if you give one, the kind of project you are interested in, and what you write. If you choose a web application, there are optional extra questions about the problem, who would use it, existing systems and your budget or timing. We use what you send to reply, to scope the work, and to invoice it if it goes ahead. Please do not send passwords, credentials or sensitive personal data in an enquiry.

Lawful basis: Article 6(1)(b), steps taken at your request before entering a contract, and Article 6(1)(f), legitimate interests in business correspondence. Processor: Google LLC, Gmail API.

B. Keeping the forms usable

The form records when the page loaded and when you first typed into it. The server also records your IP address, so it can limit how often one person can submit. This exists because automated spam made the forms unusable. It is the least intrusive way we found to stop it. The timing values are not stored after the message is sent.

Lawful basis: Article 6(1)(f), legitimate interests in keeping a contact channel working.

C. Server logs

Our hosting records technical access logs, which include the IP address, browser user agent, timestamp and the address requested. These protect the site against attacks and help diagnose faults.

Lawful basis: Article 6(1)(f), legitimate interests in security.

3. Cookies and analytics.

This site does not set cookies and does not use analytics or advertising tags.

4. Who else sees it.

We do not sell, rent or trade personal data. It is shared only with technical providers acting on our instructions:

• Google LLC, for email delivery and video calls.
• Our hosting and CDN provider, for serving the site and absorbing attacks.

Some data moves outside the United Kingdom or the European Economic Area. Where it does, it is covered by UK International Data Transfer Agreements, or by Standard Contractual Clauses. We work with clients anywhere in the UK and beyond, so this applies more often than it would for a purely local studio.

5. How long we keep it.

• Enquiries: for as long as the conversation and any resulting project is live.
• Invoicing and transaction records: six years, to satisfy HMRC and statutory accounting duties.
• Server logs: rotated and discarded within 14 to 30 days.

6. Your rights.

Under UK data protection law you can ask us to:

• give you a copy of what we hold about you
• correct anything inaccurate or incomplete
• delete it, where it is no longer needed for the purpose it was given
• stop or restrict what we are doing with it
• hand it over in a portable form

Email alex@morethannormal.co.uk. We answer verified requests within one calendar month, free.

You can also complain to the Information Commissioner’s Office. They are at ico.org.uk, or on 0303 123 1113.

7. Changes.

We update this notice when what we do changes. The date at the top is the date of the current version. That is the version that applies.