Your data and how we handle it

Slowburn takes data protection seriously. This policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over it. We've written it to be readable rather than dense — if something is unclear, you're welcome to ask.

Last updated: May 28, 2026

1. What data we collect

Contact form data: When you submit a message, we receive your name, email address, optional subject, and the content of your message. This is used only to respond to your enquiry.
Analytics data: If you consent, we collect anonymised data about pages visited, session duration, and interaction patterns. This data does not identify you personally.
Cookie preferences: Your cookie consent choices are stored in your browser's local storage. This data stays on your device and is not transmitted to our servers.
Technical data: Standard server logs may record IP addresses, browser type, and referral sources as part of routine infrastructure operation.

2. How we use your data

To respond to messages and enquiries submitted through the contact form.
To understand how the website is used and where improvements can be made, using anonymised analytics data where consent has been given.
To fulfil any legal obligations relating to data processing or record-keeping.
We do not sell personal data to third parties and do not use your contact information for unsolicited marketing.

3. Legal basis for processing

Legitimate interest: Responding to enquiries and maintaining the secure operation of the website.
Consent: Analytics and advertising cookies are processed only where you have actively agreed to their use.
Legal obligation: Some data may be processed where required by applicable law.

4. How we protect your data

The site is served over HTTPS, encrypting data in transit between your browser and our hosting infrastructure.
Access to any personal data received via the contact form is limited to the people who need it to respond to your enquiry.
Contact form submissions are retained only as long as necessary to complete the communication and any follow-up work.
In the event of a data breach that poses a risk to individuals, we will notify affected parties and the relevant supervisory authority as required by law.

5. Third-party data sharing

We may use third-party analytics services (such as Google Analytics) where you have consented to analytics cookies. These services receive anonymised usage data.
Our hosting infrastructure is operated by third-party providers. They may process technical data incidentally as part of normal operations.
We do not share personal data with advertisers or data brokers.

6. Your rights

Right to access: You can request a copy of any personal data we hold about you.
Right to rectification: If information we hold is inaccurate, you can ask us to correct it.
Right to erasure: You can ask us to delete your personal data in most circumstances.
Right to data portability: You can request your data in a structured, machine-readable format where applicable.
Right to object: You can object to processing based on legitimate interest at any time.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: avoid filling out contact forms or any data-submitting features; disable cookies through your browser settings (see our Cookie Policy for more details); or contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out to us via the Contact page. We will process your request promptly.