This page says what the site collects, why, and how long it is kept. Last updated 15 October 2026.
This site is a set of pages. There is no login and no account. You can type in two places: the contact form and the newsletter box in the footer. We keep what you send so we can reply, or so we can write to you. If you arrive from an ad or a link with campaign tags, we also keep those tags, the site you came from and the first page you landed on, and send them with your message so we know which ad or link worked. Your browser holds that information only for the length of your visit.
Google Analytics counts visits. The contact form sends your message to us. The newsletter box keeps your email address. That is the whole list:
Every page loads Google Analytics 4. The measurement ID is G-ZVH3Y87F67. It gives us counts. It tells us which pages get read and which ones people leave in four seconds.
It records a rough location worked out from your IP address, usually city and country. It records your device and browser, the pages you open, and a random number that stands in for you across those pages. It does not get your name or your email.
We set up two extra events. The first is generate_lead, and it fires when you press send on the contact form. It carries two things: the name of the form and the topic you picked from the dropdown. Not your name, not your message. The second is newsletter_signup, and it fires when you join the newsletter. It carries only which sign-up box you used, not your address. Google keeps both events for as long as the retention setting on the account says. After that, Google deletes them.
Press send and the form goes to a small program we run on Cloudflare, the company that hosts this site. It saves your message in our database first. Then it emails a copy to our mailbox, which Zoho runs for us.
It keeps what you typed: your name, email, phone number, country, topic and message. It also notes the page you sent it from and the country your connection comes from. It keeps the browser details your device sends too, such as Chrome on a Mac. Cloudflare works out that country from your IP address. We do not save the address itself.
We read your message and we reply. What you write is what we use to set the scope of the work we would run under your name.
Your message stays in the database and the mailbox while we are talking, and for a while after in case you come back. Ask us to delete it and we delete both copies.
Type your email address in the footer box and press Join, and the same small program on Cloudflare saves it in our database. It sits in its own list, apart from any message you sent us.
With your address we note the page you joined from, which sign-up box you used, the country your connection comes from, and the browser details your device sends. That is all. We never ask for your name there.
We use the address to send you what we have learned, at most once a month. Every email will carry a link to leave the list. You can also write through the contact page and ask to be taken off, and we remove your address from the database.
Google Analytics sets cookies in your browser. They hold the random ID that stops one visit being counted as five. There are no advertising cookies here, and nothing that follows you to other sites.
Your browser stores two more things, and neither is a cookie. Your answer to the cookie banner sits in your browser’s local storage, and so does your light or dark choice. It never reaches us. Clearing site data wipes it.
You can refuse all of it. The quickest way is to press “Accept essential” on the cookie banner when you first visit. Any of these works too, and the pages read the same either way:
People read this site from many countries, including the UK and the EU. UK GDPR and the EU GDPR both apply, and we treat every visitor the same way, wherever you are reading from.
For analytics, the basis is your consent. Press “Accept essential” on the banner and nothing is stored on your device. Google still receives a plain page count with no cookie and nothing that points to you. You can change your mind at any point, using the browser settings above. Nothing on the site stops working if you do.
For messages, whether they come through the form or by email, the basis is what the law calls legitimate interest. You wrote to a business and asked it something. Replying to you is the obvious reason to hold your message, and you can tell us to stop at any time.
For the newsletter, the basis is your consent. You gave it when you typed your address and pressed Join, and you can take it back at any time.
Google is the only company that gets anything from the analytics. It does the counting for us. In legal terms it is our processor, which means it handles the data on our instructions and not for its own purposes. Cloudflare hosts the site itself and handles the request your browser makes so the page can reach you. Cloudflare also runs the contact form and stores what you send through it. Zoho runs our mailbox. Both are our processors too.
Nothing is sold. Nothing goes to advertisers or data brokers. Our newsletter list stays with us and is never shared.
Google stores and processes analytics data on servers outside the UK and the EU, including in the United States. It covers those transfers with the safeguards it publishes for its customers. If that worries you, use the opt-out above. Then there is nothing about you to send.
A message you send us is different. Cloudflare and Zoho may hold it on servers outside the UK and the EU, under the safeguards they publish for their customers.
UK and EU law gives you rights over data about you. You can ask to see what we hold, to correct it, or to have it deleted. You can object to how it is used, or ask for a copy to take elsewhere. You do not need a reason, and it costs nothing.
To use one, write through the contact page and say which one you want. The law allows a month to answer, and we aim to be quicker than that. If we handle it badly, complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority in your own country.
When this policy changes, we rewrite this page and change the date under the heading. Nobody gets a notice, so check the date if it matters to you. This page says what the site does today. It is not legal advice.
No. Evensteer does not sell, rent, or pass on anything collected on evensteer.com to advertisers or data brokers. The only outside companies that handle it work on our instructions. Google runs the analytics. Cloudflare hosts the site and stores contact form messages and newsletter addresses. Zoho runs our mailbox. Our newsletter list stays with us, and there is no ad tracking on the site.
Only Google Analytics cookies. They store a random ID so one person reading four pages is counted as one visit instead of four. There are no advertising cookies and nothing that follows you to other websites.
Yes. When you press send, the form saves what you typed in our database on Cloudflare and emails a copy to our mailbox, which Zoho runs. We use it to reply to you and to scope the work you asked about. Ask us to delete it and we delete both copies.
Use the link to leave that comes with every email, or write through the contact page and ask to be taken off. We remove your address from the database. Joining stores your email address, the page and sign-up box you joined from, the country your connection comes from and basic browser details.
Press “Accept essential” on the cookie banner. You can also block cookies for the site in your browser settings, switch on your browser’s tracking protection, or install Google’s official Analytics opt-out add-on. A private window that you close when you leave works too. Every page reads exactly the same either way.
Write through the contact page and say you want your data deleted. It is free and you do not need to give a reason. UK and EU law allows a month to answer. We delete your messages from the database and the mailbox.
Yes. Visitors come from many countries including the UK and the EU, so UK GDPR and the EU GDPR both apply. Analytics runs on consent, which you can withdraw in your browser. We hold your messages on legitimate interest, so we can reply to what you asked.
Yes, for analytics. Google stores and processes that data on servers in other countries, including the United States, under the safeguards it publishes for its customers. Refusing analytics cookies means there is nothing about your visit to transfer. Cloudflare and Zoho may also hold a message you send us outside the UK and the EU, under the safeguards they publish.
In the UK, you can complain to the Information Commissioner’s Office at ico.org.uk. In the EU, contact the data protection authority in your own country. You do not have to tell Evensteer first. But if you tell us through the contact page, we can usually fix it faster.