This page says what the site collects, why, and how long it is kept. Last updated 9 September 2026.
This site is a set of pages. There is no login, no account, and no database of visitors sitting behind it. Nothing you type here lands on a server we run.
Google Analytics counts visits. The contact form opens your own email app and leaves the sending to you. That is the whole list:
Every page loads Google Analytics 4. The measurement ID is G-ZVH3Y87F67. It gives us counts. It tells us which pages get read and which ones people leave in four seconds.
It records a rough location worked out from your IP address, usually city and country. It records your device and browser, the pages you open, and a random number that stands in for you across those pages. It does not get your name or your email.
One extra event is set up. It is called generate_lead, and it fires when you press send on the contact form. It carries two things: the name of the form and the topic you picked from the dropdown. Not your name, not your message. Google keeps it for as long as the retention setting on the account says. After that it is deleted.
Press send and your browser opens your own email program with the subject and message already written. Nothing has left your device at that point. You read it. You change anything you want. Then you send it, or you do not.
So we never receive form data. We receive ordinary email in an ordinary mailbox. We read it and we reply. What you write is what we use to set the scope of the work we would run under your name.
That email stays in the mailbox while we are talking, and for a while after in case you come back. Ask us to delete it and we delete it.
Google Analytics sets cookies in your browser. They hold the random ID that stops one visit being counted as five. There are no advertising cookies here, and nothing that follows you to other sites.
Two more things get stored, and neither is a cookie. Your answer to the cookie banner sits in your browser’s local storage, and so does your light or dark choice. It never reaches us. Clearing site data wipes it.
You can refuse all of it. The banner on your first visit is the quickest way. Any of these works too, and the pages read the same either way: [add as the first bullet] “Press No thanks on the cookie banner”
People read this site from many countries, including the UK and the EU. UK GDPR and the EU GDPR both apply, and we treat every visitor the same way, wherever you are reading from.
For analytics, the basis is your consent. Press No thanks on the banner and nothing is stored on your device. Google still receives a plain page count with no cookie and nothing that points to you. You can change your mind at any point, using the browser settings above. Nothing on the site stops working if you do.
For email, the basis is what the law calls legitimate interest. You wrote to a business and asked it something. Replying to you is the obvious reason to hold your message, and you can tell us to stop at any time.
Google is the only company that gets anything from the analytics. It does the counting for us. In legal terms it is our processor, which means it handles the data on our instructions and not for its own purposes. The site itself is hosted on Cloudflare, which handles the request your browser makes so the page can reach you.
Nothing is sold. Nothing goes to advertisers, data brokers, or a mailing list. There is no mailing list.
Google stores and processes analytics data on servers outside the UK and the EU, including in the United States. It covers those transfers with the safeguards it publishes for its customers. If that worries you, use the opt-out above. Then there is nothing about you to send.
UK and EU law gives you rights over data about you. You can ask to see what we hold, to correct it, or to have it deleted. You can object to how it is used, or ask for a copy to take elsewhere. You do not need a reason, and it costs nothing.
To use one, write through the contact page and say which one you want. The law allows a month to answer, and we aim to be quicker than that. If we handle it badly, complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority in your own country.
When this policy changes, we rewrite this page and change the date under the heading. Nobody gets a notice, so check the date if it matters to you. This page says what the site does today. It is not legal advice.
No. Nothing collected on evensteer.com is sold, rented, or passed to advertisers or data brokers. The only outside company that receives anything is Google, which runs the analytics on our instructions. There is no mailing list and no ad tracking on the site.
Only Google Analytics cookies. They store a random ID so one person reading four pages is counted as one visit instead of four. There are no advertising cookies and nothing that follows you to other websites.
No. The form has no backend. When you press send, your browser opens your own email program with the message already written, and you decide whether to send it. Evensteer receives enquiries as ordinary email, so nothing you type is stored in a database.
Press No thanks on the cookie banner. You can also block cookies for the site in your browser settings, switch on your browser’s tracking protection, or install Google’s official Analytics opt-out add-on. A private window that you close when you leave works too. Every page reads exactly the same either way.
Write through the contact page and say you want your data deleted. It is free and you do not need to give a reason. UK and EU law allows a month to answer, and any email you sent is deleted from the mailbox.
Yes. Visitors come from many countries including the UK and the EU, so UK GDPR and the EU GDPR both apply. Analytics runs on consent, which you can withdraw in your browser. Email is held on legitimate interest, so we can reply to what you asked.
Yes, for analytics. Google stores and processes that data on servers in other countries, including the United States, under the safeguards it publishes for its customers. Refusing analytics cookies means there is nothing about you to transfer.
In the UK, the Information Commissioner’s Office at ico.org.uk. In the EU, the data protection authority in your own country. Telling Evensteer first through the contact page usually gets it fixed faster, but you are not required to.