Sparrow Works / Privacy notice
Your details.
Clear responsibilities.
I am Henry Williams, a sole trader trading as Sparrow Works. I am responsible for the personal information described here. Contact henry.williams85.contact@gmail.com.
What I collect
Your name, email address and business details you send me, along with your request, chosen service or product, optional phone number, budget and preferred call time. Forms record a request reference and receipt time. A short-lived keyed hash of your network address helps prevent abuse; the raw address is not stored in the request database. Hosting providers may keep technical logs.
Why I use it
I use your details to reply, arrange a systems check, prepare a quote and carry out agreed work. The legal basis is taking steps at your request before a contract, or performing a contract. For other enquiries, my legitimate interest is responding to people who contact me. I retain necessary business records to meet legal obligations.
Limited business outreach
I may use a relevant business contact’s name, role, work email and publicly available business details for limited, relevant B2B outreach where electronic marketing rules permit it. My legitimate interest is finding suitable business customers, balanced against their privacy and expectations. Sources may include a business website or a public professional listing. This is not permission to send unsolicited marketing wherever consent is required.
You can object to direct marketing at any time. Reply “unsubscribe” or email henry.williams85.contact@gmail.com. I will stop and remove your details from active outreach. I keep only the minimum suppression record needed to avoid contacting you again. Submitting a form does not sign you up for marketing.
Who processes your details
The website uses Vercel for hosting and functions, Supabase in London for encrypted request storage, and FormSubmit and my email provider for email notifications and correspondence. Notifications include your submitted details and reference, with your email as the reply address. A notification failure does not remove a saved request. Providers may process information outside the UK under their applicable transfer safeguards. I do not sell your details.
How long I keep it
Unprogressed form requests expire after 30 days, with a daily deletion job for the production queue. Email copies are separate. I review ordinary enquiry and outreach correspondence within 12 months of the last contact and remove it when no longer needed. For agreed projects, I keep necessary scope, delivery and business records for up to 6 years after the work ends, unless a legal requirement or unresolved dispute requires longer. Opt-out suppression records are kept while outreach continues.
Your rights
You can ask for a copy of your information, correction or deletion, or ask me to restrict its use. Depending on the legal basis, you may also request portability or object to processing. The right to object to direct marketing is absolute. I may need to verify your identity before disclosing information. You can complain to the Information Commissioner’s Office at ico.org.uk.
Access, cookies and browser storage
Never send passwords or sensitive client records through the forms. For project access, invite henry.williams85.contact@gmail.com as a user or collaborator with the permissions needed. The site uses browser storage for your theme preference and the optional brief builder. Request forms do not store your personal details there. There are no advertising or analytics trackers. Demonstrations use fictional records in memory. Email links open your chosen email service so you can review and send the message yourself. WhatsApp opens only if you choose its link.
In a local preview, requests and notifications remain local and have not reached my live inbox. The production site accepts a request only when storage is configured and the save succeeds. A preferred call time is a request until I confirm it.
Updated 16 October 2026.