Last updated 10 September 2026
What we do with your details.
Two people and one inbox. Here is everything this website collects, why it collects it, who else sees it and how to get it back.
On this page
Who is responsible for your information
Bude Web Services is a trading name of Peake Management Ltd, a company registered in England and Wales, company number 15574401. Peake Management Ltd is the data controller for everything described on this page: it decides what is collected and why.
There is no data protection officer, because a two-person company is not required to appoint one. Leonard answers data protection questions. We do not publish an email address, so use the contact form, ring 07434 290841, or write to us at the postal address below. Say what you need and it reaches him.
Our postal address for this purpose is Bude, Cornwall, EX23. The registered office street address is on the public register at Companies House under company number 15574401; it is a working address rather than a place to visit, so it is not published here.
The law this follows
The UK General Data Protection Regulation and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. Cookies and anything else stored on your device are covered by the Privacy and Electronic Communications Regulations, and that is set out separately in the cookie policy.
The 2025 Act loosened the rules on some low-risk analytics. We have not taken that route. Nothing beyond what the site needs to work is stored on your device until you have said yes.
What we collect, and why
Nothing on this site asks you to make an account or log in, and there is no shop. The only information we hold about you is what you type into a form, what you send us by email, phone or WhatsApp, and the technical records a web server keeps in order to serve a page.
| Where it comes from | What it is, and why |
|---|---|
| The enquiry form | Your name and a phone number or an email address first, which reach us as soon as you press the first button. Then, if you carry on, your business name, your web address if you have one, what kind of business you run, what you need, your budget if you give one, and anything you write in the message box. We use it to answer you and to price the work. |
| The free website check | The web address or business name you send, and the phone number we reply to. If you add them afterwards, what kind of business you run and what annoys you about your site. We look at the site, write the check and send it to you. |
| Where a form was sent from | Each form also records the page it was sent from, the first page you opened on this visit, the website that linked you here (just its name, such as google.com) and any campaign tags on that link. It goes with your message and nowhere else, and it tells us which pages are useful. |
| Email, phone and WhatsApp | Whatever you send. Messages sit in the inbox or on the phone with everything else, and we use them to reply and to keep track of a job. |
| Spam checks | A hidden field and the time between the page loading and the form being sent. Both are used only to tell a person from a script. If a submission is dropped, a log line records a reference, the business name and a masked email address (l***@example.com) so a real enquiry can be found again. |
| Rate limiting | Your IP address, held in the server's memory for one minute so one machine cannot send hundreds of forms. It is never written to a file and never linked to your enquiry. |
| Server logs | Our host records requests: the page asked for, the time, the IP address, the browser's user agent. That is how a web server works and how a fault gets found. |
| Your cookie choice | Kept in your own browser, not sent to us. The cookie policy names the key and says exactly what is in it. |
We do not ask for anything special category, and we do not want any. Please do not send us health details, bank details or card numbers by email or through a form.
The lawful basis for each of those
Under UK GDPR Article 6, everything above rests on one of three grounds.
- Steps taken at your request before a contract. When you send an enquiry or ask for a website check, we handle your details in order to answer you and to quote for work you asked us to quote for.
- Legitimate interests. Server logs, spam checks and rate limiting exist so the site stays up and the inbox stays usable. Our interest is running the site securely; the information involved is minimal and none of it is used to profile you or to sell you anything.
- Consent. Anything stored on your device beyond what the site needs to work, and any marketing email, happens only if you have said yes. You can take that back at any time, and the site keeps working without it.
Where we later have a legal reason to keep something, for example an invoice, the basis becomes our legal obligation under tax and company law.
Marketing
There is no mailing list. We do not run a newsletter, we do not add enquirers to one, and we have never sold or shared a contact for marketing. If that ever changes, it will be opt-in, the box will not be pre-ticked, and every message will carry a way out.
Replying to your enquiry is not marketing. If you go quiet we might chase once, and then we stop.
How long we keep it
Long enough to do the job and to answer a question about it afterwards, and no longer. Where a period is still being settled it is written in brackets below rather than invented.
- Enquiries that do not turn into work: [confirm the retention period with Leonard].
- Client records, contracts and invoices: kept as long as tax and company law require, currently six full financial years.
- Website check requests: [confirm the retention period with Leonard].
- Server logs held by our host: kept for as long as that host keeps them, which is a matter of days rather than years.
- Rate limiting: one minute, in memory, then gone.
You can ask us to delete an enquiry sooner. Unless we need it for an invoice or a live job, we will.
Who else touches it
A short list, and it is short on purpose. Each of these is a supplier acting on our instructions, not a company we sell anything to.
| Supplier | What they do with it |
|---|---|
| Vercel | Hosts this website and serves every page. Their systems handle the request logs described above. They are a US company, so some of that handling may happen outside the UK. |
| Resend | Will deliver the form emails to our inbox once the sending address is set up. Until then the forms tell you plainly that they are not live and give you the phone number instead. Also a US company. |
| Our email and phone provider | Whatever you send by email, phone or WhatsApp passes through the provider carrying it, the same as any other message. WhatsApp is run by Meta and its own terms apply to that conversation. |
| Analytics | None is running on this site today. If we add one, it stays behind the cookie banner and nothing is measured until you say yes. |
Where information is handled outside the UK, we rely on the transfer terms in each supplier’s own data processing agreement. We check those before a form goes live rather than after.
We would hand something over to a court, the police or a regulator if the law told us to. Nothing else leaves.
Your rights
You can ask us to do any of the following, and it costs nothing.
- Tell you what we hold about you, and give you a copy.
- Correct anything wrong.
- Delete it, where we do not need it for a live job or a legal reason.
- Stop using it for a while, if you are disputing something.
- Hand you a machine-readable copy, or send it to someone else.
- Object to us using it under legitimate interests.
- Take back a consent you gave, including the cookie choice, at any time.
Ask on the contact form or ring 07434 290841. We will answer within one month, and normally a great deal sooner. We may ask a question or two to be sure it is you before we send anything.
Nothing on this site makes an automated decision about you, and there is no profiling.
If you are unhappy
Tell us first, if you can face it. Ring 07434 290841 or use the contact form, and you will get a person rather than a ticket number.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, whether or not you have spoken to us. Their complaints page is https://ico.org.uk/make-a-complaint/ and their helpline is 0303 123 1113.
Children
This site is for people running businesses. It is not aimed at children, we do not knowingly collect anything about anyone under 18, and if you think we have, tell us and it will be deleted.
Changes to this policy
When this changes, the date at the top of the page changes with it. If a change matters, for example a new supplier handling your details, we will say so here rather than quietly rewrite a line.
This version was published on 10 September 2026 and is the first. Several retention periods are still in brackets while they are agreed, and they will be filled in rather than glossed over.
Ask us anything on this page in writing or on the phone.
Data protection questions go to the same two people who answer everything else. If you want to know what we hold about you, say so and we will send it.
We reply within 24 hours