Privacy Policy

This site provides the fractional CTO services of Ben Sheridan-Edwards, delivered through Volition Digital Consulting Ltd (“I”, “me”, “my”), a company registered in England and Wales (company number 14519859). The company is the data controller for the personal data described in this policy. This policy explains what personal data I collect when you use this website, why I collect it, who I share it with, and the rights you have. If you have any questions, email me at bensheridanedwards@gmail.com.

The information I collect

• Information you give me. When you submit the contact or “send me the breakdown” form, or book a call, I collect your name, email address, and anything you choose to tell me about your situation, along with whether you have asked me to follow up about working together.
• Your scorecard responses. If you use the Release-Confidence Scorecard, I record which signals you flag and which step you are on. These are stored as short codes, not free text, and do not identify you on their own unless you then send them with your email.
• Information collected automatically. Like most websites, I collect basic technical and usage data: the pages you visit, rough device and browser information, and an approximate location derived from your IP address. A first-party event log records which steps and signals were used, never free text and never personal identifiers.

How and why I use it

My lawful bases under UK GDPR are:

• To reply to your enquiry and arrange a call. Lawful basis: my legitimate interest in responding to people who contact me, and taking steps at your request before entering a contract.
• To email your scorecard breakdown when you request it. Lawful basis: carrying out the action you asked for.
• To follow up about working together, where you have ticked the consent box. Lawful basis: your consent, which you can withdraw at any time.
• To run and improve the site, keep it secure, and prevent abuse. Lawful basis: my legitimate interest in a working, secure website.

Who I share it with

I do not sell your data. I share it only with the service providers that help me run the site, and only as needed:

• HubSpot, my CRM, which stores enquiry and contact details.
• Resend, which sends the scorecard breakdown and any follow-up email.
• Cal.com, which schedules booked calls and notifies this site when one is booked.
• Vercel, which hosts the site and provides privacy-friendly, cookieless analytics.
• Upstash, which securely stores your submission and any booking so I can follow up, and rate-limits the forms against abuse.

Each acts as my processor under contract and only on my instructions. I may also disclose data where the law requires it.

International transfers

Some of these providers are based outside the UK, including in the United States. Where data is transferred internationally, it is protected by appropriate safeguards, such as the UK extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement.

How long I keep it

I keep enquiry and contact details for as long as we are in conversation and for a reasonable period afterwards in case you get back in touch. Submissions in my own store auto-expire after about six months unless you ask me to delete them sooner. If you have consented to marketing follow-up, I keep your details until you withdraw consent. Analytics data is retained according to each provider’s standard periods. You can ask me to delete your data at any time.

Your rights

Under UK data protection law you have the right to access the personal data I hold about you, to have it corrected or deleted, to restrict or object to how I use it, to data portability, and to withdraw consent at any time. To exercise any of these, email me at bensheridanedwards@gmail.com and I will respond within one month. If you are not happy with how I have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies and analytics

This site uses privacy-friendly analytics (Vercel) that do not use tracking cookies. Some essential functionality may store small amounts of data in your browser, and the booking embed (Cal.com) may set its own cookies if you interact with it. I do not use advertising or cross-site tracking cookies.

Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed.