Privacy Policy

Who I am

GoBurley is a sole trader business run by George Burley, based in Portishead, North Somerset. For data protection purposes I am the data controller for this website.

What I collect

When you use the contact form

The form asks for your name, email address and message, and optionally your phone number. I collect that so I can reply to you. Nothing more is required.

When you simply visit

The site is hosted on Cloudflare, which keeps standard server logs including your IP address, browser type and the pages you requested. These are used to keep the site running and to protect it from abuse.

Advertising cookies

This site loads the Google Ads tag, which can set cookies used to measure whether an advert led to an enquiry. These are only set if you accept them using the banner shown on your first visit. I do not run Google Analytics, so there is no general visitor analytics tracking either way.

Why I'm allowed to hold it

Under UK GDPR I have to give a lawful basis for processing your data. Mine are:

• Legitimate interests for replying to your enquiry, keeping records of work I have quoted or carried out, and keeping the website secure.
• Contract where you become a client and I need your details to deliver and invoice the work.
• Consent for non-essential advertising cookies.
• Legal obligation for keeping financial records, which HMRC requires me to retain.

Who else sees it

I do not sell your data, and I do not share it for marketing. These services are involved in running the site, and some are based outside the UK:

Formspree

Processes contact form submissions and forwards them to my inbox. Based in the United States.

Cloudflare

Hosting, content delivery and security for the site and its downloadable files.

Google

Advertising and conversion measurement through Google Ads, and web fonts served from Google Fonts, which receives your IP address in order to deliver them.

unpkg and jsDelivr

Public code delivery networks used for a small number of site features, such as animated icons.

Where data is transferred outside the UK, those transfers rely on the safeguards those providers have in place, such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses.

How long I keep it

• Enquiries that don't become work: up to 12 months, then deleted.
• Client records: for as long as I'm working with you, and then 6 years after the final invoice, because HMRC requires financial records to be kept that long.
• Server logs: retained for a short period by Cloudflare under their own policy.

Your rights

Under UK GDPR you can ask me to:

• Tell you what data I hold about you, and give you a copy.
• Correct anything that's wrong.
• Delete it, where I have no legal reason to keep it.
• Restrict or object to how I'm using it.
• Provide it in a portable format, or send it to someone else.

Email me and I'll deal with it within one month, at no charge. If you're not happy with how I've handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies and your choice

Cookies are small files stored by your browser. The only non-essential cookies this site uses are Google's advertising cookies described above, and they are set to denied until you choose otherwise. On your first visit you'll see a banner asking. Decline and the site works exactly the same.

You can change your mind at any time using the Cookie Settings link at the bottom of any page. Your choice is remembered in your browser's local storage, not in a cookie, so clearing your browser data will simply mean you get asked again.

Google is told whether you consented, so if you decline, no advertising identifiers are stored. You can also block or delete cookies in your browser settings, and that will not stop the site working.

Changes

If I change how any of this works, I'll update this page and change the date at the top. This policy was last updated on 8 August 2026.