Privacy policy

Who I am

This site is run by Calum O'Gorman, a sole trader based in the United Kingdom, trading as Calum O'Gorman ("I", "me", "my"). I am the data controller for the personal data described here. The best way to reach me about privacy, or to exercise any of your rights, is by email at [email protected]. A postal address is available on request.

The information I collect

• When you ask for a call or fill in the enquiry form: your name, email address, website, the workflows you select, your rough timeline and budget, and anything you choose to write in the free-text fields about your process and context.
• When you email me directly: your email address and whatever you include in your message.
• If I contacted you first (business outreach): business contact details such as your name, role, company, work email, and public professional profile, gathered from publicly available sources.
• Automatically when you visit: standard technical information such as your IP address, browser type, and the time of your request, recorded in routine server and security logs by my hosting provider.

How I use it, and my lawful basis

• To respond to your enquiry and arrange and run our call. Lawful basis: taking steps at your request before entering a contract, and my legitimate interest in responding to people who contact me.
• To draft a tailored reply. The details you submit in the form may be processed by an AI service to help me write a personalised response to you. The reply is sent from my own systems. Lawful basis: my legitimate interest in answering enquiries efficiently.
• To reach out to potential clients about my services. Lawful basis: my legitimate interest in business-to-business marketing. You can object at any time and I will stop, see Your rights below.
• To run, secure, and improve the website. Lawful basis: my legitimate interest in operating a safe, working site.

I do not sell your personal data, and I do not use it for automated decisions that produce legal or similarly significant effects about you.

Who I share it with

I use a small set of trusted service providers who process personal data on my behalf, under contract and only on my instructions:

• Cloudflare, for website hosting, content delivery, and processing form submissions.
• Resend, to deliver enquiry and follow-up emails.
• Google, for the AI service that drafts tailored replies (Gemini), call booking (Google Calendar Appointment Schedules), and video calls (Google Meet).
• Microsoft, for email (Microsoft 365), used mainly for outreach.
• Lemlist (Lempire), for email deliverability and outreach tooling.
• Zoom, for phone and video calls (Zoom Phone).

This list reflects the tools I use today and may change as I update my stack. I will keep it accurate. I may also disclose information where the law requires it.

International transfers

Some of these providers are based in the United States or process data outside the UK. Where personal data is transferred outside the UK, it is protected by appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement (or Standard Contractual Clauses with the UK Addendum).

How long I keep it

I keep enquiry and client information for as long as I need it for our relationship and for a reasonable period afterwards to meet legal, accounting, and record-keeping needs. Outreach contact details are removed when you ask, or when they are no longer relevant. If nothing comes of an enquiry, I delete the related data once it is clear there is no ongoing reason to keep it.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data I hold about you;
• ask me to correct data that is wrong or incomplete;
• ask me to delete your data;
• ask me to restrict or stop processing your data;
• object to processing based on my legitimate interests, including outreach marketing;
• ask for your data in a portable format; and
• withdraw consent where I rely on it.

To exercise any of these, email me at [email protected]. If you are not happy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though I would appreciate the chance to put things right first.

Cookies

This site does not use advertising, tracking, or analytics cookies. My hosting provider may set strictly necessary cookies that keep the site secure and working. These are not used to profile or track you across other sites.

Changes to this policy

I may update this policy from time to time. When I do, I will change the "last updated" date at the top. Significant changes will be made clear on this page.