Last updated: 15 June 2026
BackCraft ("we", "us", "our") is committed to protecting your personal data. This policy explains what information we collect, why we collect it, how we use it, and your rights under UK law. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The data controller is Mark Kendall, trading as BackCraft, Yorkshire, UK. You can contact us at mark@backcraft.co.uk.
What data we collect
Information you give us directly
When you submit a form on this website (such as the free audit request form), we collect:
- Your name
- Your business name and trade
- Your town or area
- Your phone number or email address
- Your website URL (if provided)
Information collected automatically
When you visit our website, basic technical information may be collected automatically by our hosting provider (Netlify), including your IP address, browser type, and pages visited. We do not use tracking cookies or advertising pixels on this website.
Why we collect it and our legal basis
We collect your information for the following purposes:
- To respond to your enquiry — when you request a free audit, we use your contact details to get in touch. Legal basis: legitimate interest.
- To provide our services — if you become a client, we use your information to deliver the services you've signed up for. Legal basis: contract performance.
- To comply with legal obligations — we may need to retain certain records for accounting or legal purposes. Legal basis: legal obligation.
We do not use your data for automated decision-making or profiling.
How long we keep your data
- Enquiry data (audit requests where no service was purchased): 12 months from the date of enquiry
- Client data: 6 years from the end of the contract (for tax and legal record-keeping purposes)
Who we share your data with
We do not sell your personal data. We may share it with the following third-party service providers who help us operate our business:
- Netlify — our website hosting provider. Form submissions are processed via Netlify Forms. Netlify's privacy policy is available at netlify.com.
- Google Workspace — we use Gmail and Google Drive for business operations. Google's privacy policy is available at google.com.
- Stripe — for processing payments if you become a client. Stripe's privacy policy is available at stripe.com.
All third-party providers are required to handle your data securely and in accordance with UK GDPR.
Your rights
Under UK GDPR, you have the following rights:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your data (subject to legal obligations)
- Right to restrict processing — you can ask us to limit how we use your data
- Right to data portability — you can request your data in a portable format
- Right to object — you can object to us processing your data on the basis of legitimate interest
To exercise any of these rights, email us at mark@backcraft.co.uk. We will respond within 30 days.
Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. We encourage you to review it periodically.
Contact us
For any privacy-related questions, contact Mark Kendall at mark@backcraft.co.uk.