Privacy notice
What this website collects about you, why, and what you can do about it.
Last updated 5 October 2026.
Who I am
This website is run by Rob Sherwood Ltd, a company registered in England and Wales (number 17498472), registered office 41 Rosebank Gardens, Gravesend, DA11 8RZ. For anything to do with your data, email rob@rob-sherwood.co.uk.
Under UK data protection law (UK GDPR), Rob Sherwood Ltd is the "controller" of the personal data described here.
The short version
- If you use the contact form, I get your message by email so I can reply. It isn't stored on this website.
- The web server keeps short-lived logs, including IP addresses, for security. They are deleted after 14 days.
- I count visits with Umami, which runs on my own server, uses no cookies and doesn't store your IP address.
- I don't sell your data, and I don't send marketing emails.
The contact form
What: your name, email address, company (if you give it), what it's about, your message and how urgent it is.
Why: to reply to you, and to discuss and provide work you ask about. The legal basis is taking steps at your request before entering into a contract, or my legitimate interest in answering enquiries.
How: the form emails your message to my mailbox, hosted by Proton (Proton AG, Switzerland). Nothing you type is saved on this website.
How long: if your enquiry doesn't turn into work, I delete it after 12 months. If it does, I keep the correspondence for as long as the work lasts and then for as long as the law requires for business and tax records.
Spam protection: to stop the form being abused, the website keeps a scrambled (hashed) version of your IP address for up to 24 hours, which can't be turned back into the address.
Server logs
Like almost every website, the server records each request: your IP address, the page asked for, the time, and your browser type. I use these logs only to keep the site running and secure, which is my legitimate interest. They are deleted after 14 days.
The website is hosted by Mythic Beasts Ltd on a server in the UK.
Analytics
I use Umami to count visits and see which pages are useful. It's open-source software running on my own server in the UK, so nothing about your visit goes to Google or any other company.
What: the page you visited, the site that sent you (if any), your browser, operating system and device type, and your rough location (country, region and town), worked out from your IP address.
What it doesn't do: it sets no cookies and stores nothing in your browser. Your IP address is used for a moment to work out your rough location and an anonymous visitor code, then thrown away. The code changes every month, so visits can't be linked over time, and it can't be turned back into who you are. It doesn't follow you to other websites. If your browser sends a "Do Not Track" signal, you aren't counted at all.
Why: my legitimate interest in knowing which pages are useful, so I can improve them. Because nothing is stored on your device, there's nothing to agree to.
How long: the visit counts are kept for up to 2 years. They don't identify you.
Who else sees your data
- Proton, which hosts my email.
- Mythic Beasts, my hosting provider, which runs the server this website is on (in the UK).
I don't sell or share your data with anyone else, except where the law requires it.
Your rights
You can ask me to:
- tell you what personal data I hold about you and give you a copy;
- correct anything that's wrong;
- delete it;
- stop or limit what I do with it, or object to it;
- give it to you in a format you can take elsewhere.
Email rob@rob-sherwood.co.uk. I'll respond within one month. There's no charge.
Complaints
If you're unhappy with how I've handled your data, please tell me first and I'll do my best to put it right. I'll acknowledge your complaint and respond without undue delay.
You can also complain to the ICO, the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.