What happens to an enquiry.

What the form stores

Name, email address, telephone number, the business or project name, the kind of site, the budget range, the message, and the date it was sent. There is no account to create.

Why it is kept

The enquiry is used to reply, to ask a question, and to prepare a quote if you want one. That is a step you asked for before any contract. It is not added to a mailing list, and it is not sold or passed on for advertising.

When the server can send mail, the studio receives a copy of the enquiry, and the address on the form receives a short confirmation with the same details. Neither message adds you to a mailing list. The record itself is stored in the studio database.

How long

An enquiry stored by this website is deleted 24 months after it arrives. The site removes stored enquiries on that schedule. Copies that were emailed stay in those mailboxes until they are deleted. You can ask for the stored enquiry to be deleted sooner.

The cookie

The site sets one session cookie so the contact form can reject a forged submission. It expires when you close the browser. There are no advertising or analytics cookies, so there is no consent banner.

The server keeps the IP address of a contact-form submission or an admin sign-in attempt so it can refuse repeats. Those addresses are removed within an hour.

The invisible spam check

Sending the contact form runs Cloudflare Turnstile in the background. No box or badge is shown. The check rejects automated submissions, and it has to run if you want to send the form.

For that check, Cloudflare processes your IP address, a TLS fingerprint, your browser’s user-agent header, the Turnstile site key, and this website as the place the key was used. Cloudflare’s notice says those signals do not identify a person directly. SteBlood.uk is the controller for this use. The check relies on legitimate interests in keeping the form free of automated submissions, and the signals are strictly necessary for it. Cloudflare processes them for this purpose on this site’s instructions.

Cloudflare also uses the same signals, as its own controller, to improve Turnstile’s bot detection. It relies on its legitimate interests for that separate use. The details are in Cloudflare’s Turnstile privacy addendum, which supplements Cloudflare’s privacy policy.

To ask about the check on this website, or to use your data protection rights for it, write to hello@steblood.uk. For Cloudflare’s own use of the signals, write to its data protection officer at dpo@cloudflare.com.

Your rights

You can ask for a copy of your enquiry, a correction, deletion, or a restriction on how it is used. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.