Privacy policy
Written to be read rather than to be complied with. If anything here is unclear, ask me and I will answer plainly. Last updated 27 July 2026.
Who this is
Craig Fearn, sole trader, operating craigfearn.com from Cornwall. I am the data controller for anything you send through this site. Contact: [email protected].
What the contact form collects
Your name, email address, organisation if you give one, the subject you pick, your message, the fact that you ticked the confidentiality box, the time you submitted, and the IP address the submission came from. The IP is used to rate-limit the form and for nothing else.
There is no account, no newsletter, no marketing list, and no profile built about you.
Where it goes, and who else touches it
- Cloudflare hosts the site and runs the bot check on the form. Every submission is written to Cloudflare's storage before delivery is attempted, so that a mail failure cannot lose your message.
- Resend is the backup channel for sending the notification email if the primary one fails.
- Google Workspace holds the inbox the message arrives in.
Those three are processors acting on my instructions. Nobody else sees your enquiry. I do not sell, share, rent or trade personal data, and there is no advertising on this site.
How long it is kept
Form submissions are deleted automatically from storage 180 days after they are sent. The email itself stays in my inbox while our correspondence is live, and I delete enquiries that did not turn into work. If you want yours removed sooner, ask and I will do it the same day.
Confidentiality
Separate from data protection, and stricter than it: what you tell me in an enquiry or a conversation is not repeated, not used as an example, and not written up as a case study. Where an anonymised example appears anywhere on this site, it is there with the person's agreement.
The one limit is the ordinary one. If I believe there is a risk to your life or someone else's, I will say so to you first and encourage you to get help. I am not a clinician and I do not provide crisis care.
Your rights
Under UK GDPR you can ask me for a copy of what I hold, ask me to correct it, ask me to delete it, object to how it is used, or ask for it in a portable format. Email me and I will act on it. You can also complain to the Information Commissioner's Office, though I would rather you told me first so I can fix whatever went wrong.
Cookies and tracking
No analytics, no advertising pixels, no cross-site tracking. The bot check on the contact form sets its own cookie, which is what allows it to tell a person from a script. Details are on the cookie policy.
Changes
If this policy changes materially I will change the date at the top rather than quietly editing the text.