Privacy

1. Who controls your data

The data controller is More Than Normal, founded and operated by Alex Harvey.

2. What we collect, and why

Only what is needed to answer you, deliver the work, and keep the site up.

A. Asking a question on the home page

The question box on the home page collects your question and your email address. It does not ask for your name, because it does not need one. We use them to reply. If a question turns out to be one other people ask too, we may publish an answer to it. That answer never includes anything that identifies you.

Lawful basis: Article 6(1)(f), legitimate interests in answering a direct enquiry. Processor: Google LLC, Gmail API.

B. Service enquiries

The contact form collects the service you are asking about, your name and your email address. It also takes your website, if you give one, and what you write. We use it to reply, to scope the work, and to invoice it if it goes ahead.

Lawful basis: Article 6(1)(b), steps taken at your request before entering a contract, and Article 6(1)(f), legitimate interests in business correspondence. Processor: Google LLC, Gmail API.

C. Booking a scoping call

Booking a free fifteen minute call collects your name and email address. It also takes your website if you give one, the slot you pick, and any notes you add. We use them to check availability, hold the slot, make the video link, and send you an invitation.

Lawful basis: Article 6(1)(b), steps taken at your request before entering a contract. Processor: Google LLC, Google Calendar and Google Meet, under Google Workspace data processing terms.

D. Keeping the forms usable

Every form records when the page loaded and when you first typed into it. The server also records your IP address, so it can limit how often one person can submit. This exists because automated spam made the forms unusable. It is the least intrusive way we found to stop it. The timing values are not stored after the message is sent.

Lawful basis: Article 6(1)(f), legitimate interests in keeping a contact channel working.

E. Server logs

Our hosting records technical access logs: IP address, browser user agent, timestamp and the address requested. These protect the site against attacks and help diagnose faults.

Lawful basis: Article 6(1)(f), legitimate interests in security.

3. Cookies and analytics

This site uses Google Analytics 4 to see which pages help and how visitors move between them. Nothing loads and no cookie is set until you agree, using the banner shown on your first visit. Decline and nothing changes.

If you agree, Google Analytics sets cookies to recognise your browser between visits, and records the pages you view and when a form on this site is started or sent. We do not run advertising and Google Signals, which would link this to your wider Google activity, is switched off.

Lawful basis: Article 6(1)(a), your consent. Withdraw it at any time by clearing this site's storage in your browser, or contact us and we will clear it on your behalf. Processor: Google LLC, Google Analytics.

4. Who else sees it

We do not sell, rent or trade personal data. It is shared only with technical providers acting on our instructions:

• Google LLC, for email delivery, calendar bookings and video calls.
• Our hosting and CDN provider, for serving the site and absorbing attacks.

Some data moves outside the United Kingdom or the European Economic Area. Where it does, it is covered by UK International Data Transfer Agreements, or by Standard Contractual Clauses. We work with clients anywhere, so this applies more often than it would for a purely local studio.

5. How long we keep it

• Enquiries and questions: for as long as the conversation and any resulting project is live.
• Invoicing and transaction records: six years, to satisfy HMRC and statutory accounting duties.
• Bookings: until the call has happened, then archived or deleted.
• Server logs: rotated and discarded within 14 to 30 days.

6. Your rights

Under UK data protection law you can ask us to:

• give you a copy of what we hold about you
• correct anything inaccurate or incomplete
• delete it, where it is no longer needed for the purpose it was given
• stop or restrict what we are doing with it
• hand it over in a portable form

Email alex@morethannormal.co.uk. We answer verified requests within one calendar month, free.

You can also complain to the Information Commissioner's Office. They are at ico.org.uk, or on 0303 123 1113.

7. Changes

We update this notice when what we do changes. The date at the top is the date of the current version. That is the version that applies.