Privacy Notice

This notice explains what personal data Two Wrens collects through this website, why it is collected and what you can do about it. It is written to be read, not to be survived — if anything here is unclear, ask me.

Who is responsible for your data

Two Wrens Limited is the data controller for the personal data described here.

• Registered in England and Wales.
• Company number 09698581.
• Registered office: Ivy Cottage, Western Rd, Crediton, Devon, United Kingdom, EX17 3LT.
• Privacy contact: hello@twowrens.co.uk.

What I collect, and why

There are no accounts, no newsletter and no advertising on this site. Personal data reaches me in only a few ways.

When you use the contact form

The form collects your name, email address, and the message you send, plus any optional phone number, company name, or package you select. Those details are emailed to me so I can reply. They are not stored in a website database.

Lawful basis: taking steps at your request before entering a contract (Article 6(1)(b)), or my legitimate interest in responding to people who contact me (Article 6(1)(f)).

When you book a call

Bookings are handled by Calendly, which collects your name, email address, any notes you add and the time you choose. The booking calendar only loads if you allow it — see the Cookie Policy. I use these details to hold the call and to send the confirmation and any follow-up summary.

Lawful basis: taking steps at your request before entering a contract (Article 6(1)(b)), or my legitimate interest in responding to people who ask to speak to me (Article 6(1)(f)).

When you email me

Whatever you choose to put in the email, plus your address and any signature block, arrives in my inbox and stays there while we are in contact. I use it to reply and to keep a record of what was discussed.

Lawful basis: Article 6(1)(b) where we are working towards or under a contract, otherwise the legitimate interest in Article 6(1)(f) of answering business enquiries.

When you simply visit

The hosting platform keeps standard server logs, which can include your IP address, the pages requested and your browser type. These exist to keep the site running and secure.

If you allow Analytics in the cookie banner, Google Analytics 4 also receives page views and a small set of events (for example sending an enquiry, opening the booking calendar, or downloading a guide PDF), together with any campaign parameters on the link you used. That helps me understand which content and campaigns are useful. Analytics does not load unless you allow it — see the Cookie Policy.

Lawful basis: legitimate interests in the security and reliability of the service for server logs (Article 6(1)(f)). For Google Analytics, PECR consent to store or access information on your device, with UK GDPR Article 6(1)(a) consent for the related analytics processing.

Who else sees it

I do not sell personal data and I do not share it for anyone else's marketing. It reaches other organisations only where they provide part of the service.

• Calendly — scheduling, where you use the booking calendar.
• Google LLC — Google Analytics 4, only if you allow Analytics cookies.
• Email and hosting providers — delivering mail and serving this site.
• Professional advisers or authorities — only where the law requires it or to establish or defend a legal claim.

Data leaving the UK

Some of those suppliers process data outside the UK, including in the United States. Where that happens, the transfer relies on UK adequacy regulations or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with the supplier's own safeguards. You can ask me which mechanism applies to a particular supplier.

How long it is kept

• Enquiries that do not become work — up to 12 months from our last contact, then deleted.
• Booking records in Calendly — up to 12 months after the call.
• Client correspondence and project records — for the life of the engagement and then six years, to meet contractual, tax and professional record-keeping obligations.

Your rights

Under UK data protection law you can ask me to give you a copy of your data, to correct it, to delete it, to restrict how it is used, or to provide it in a portable format. You can object to processing carried out on the basis of legitimate interests. Where processing rests on consent — the booking calendar or Analytics — you can withdraw it at any time, and doing so does not affect anything done beforehand.

Email hello@twowrens.co.uk and I will acknowledge within five working days and respond within one month. There is no charge.

Cookies and similar storage

The site stores your cookie choice in your browser. Optional categories (booking calendar and Analytics) only load after you allow them. The Cookie Policy sets out what each category does, and you can change your mind whenever you like using the cookie settings link in the footer.

Keeping it secure

The site is served over HTTPS. Access to the inbox and the scheduling account is limited to me and protected by multi-factor authentication. No website can promise perfect security, but personal data here is deliberately kept to the minimum — contact-form messages are emailed to me and are not kept in a website database of visitors.

Complaints

If you think I have handled your data badly, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab), or on 0303 123 1113.

Changes to this notice

If the site starts doing something new with personal data — a mailing list, for instance — this notice will be updated before that happens and the date at the top will change.