Privacy Policy

Who we are

The data controller is Steve Bolton, trading as boltn, based in the United Kingdom. boltn is a sole trader. For all data protection enquiries, contact us at privacy@boltn.com.

As a small sole trader, boltn is not required to register with the ICO unless we process data in ways that trigger mandatory registration. We operate within the requirements of UK GDPR and the Data Protection Act 2018.

What we collect and why

We only collect data you actively provide or that is generated as part of a service you use on this site. We do not buy data, run tracking pixels, or use advertising networks.

Booking data (via Cal.com)

When you book a discovery call, Cal.com collects your name, email address, and appointment details. This data is necessary to schedule and confirm the booking.

Lawful basis: Contractual necessity (Article 6(1)(b) UK GDPR). Processing is required to fulfil the booking you requested. Without it, we cannot hold the appointment.

Contact form submissions (via Resend)

When you use the contact form, we collect your name, email address, and the content of your message. We use this to respond to your enquiry.

Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR). Our legitimate interest is responding to enquiries directed at us. We have balanced this against your interests and do not consider this processing to be intrusive or unexpected.

Site analytics (via Vercel Analytics)

This site uses Vercel Analytics. It is cookieless and collects only aggregate, non-personal data — page views, referrer categories, and general device type. No individual user records are created or retained by boltn. No consent is required because no personal data is collected and no cookies are set.

Third-party processors

We use the following third-party services to operate this site. Each processes data on our behalf under their own data processing agreements.

Cal.com

Cal.com is a US-based scheduling service. Data transferred from the UK to the US is handled under standard contractual clauses. You can review their privacy practices at cal.com/privacy.

Resend

Resend is an email delivery service used to route contact form submissions to us. You can review their privacy practices at resend.com/legal/privacy-policy.

Vercel

Vercel hosts this site and provides the cookieless analytics service described above. You can review their privacy practices at vercel.com/legal/privacy-policy.

How long we keep your data

Retention periods depend on why the data was collected.

• Cal.com booking data: Retained for the duration of the booking relationship. Once the engagement is concluded and no further obligation exists, you can contact us to request deletion.
• Resend contact form data: Retained until the enquiry is resolved or you ask us to delete it. We do not keep contact submissions after the conversation has concluded.
• Vercel Analytics: Aggregate data only. No individual records are retained by boltn.

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct inaccurate personal data.
• Erasure: You can ask us to delete your personal data where we no longer have grounds to retain it.
• Restriction: You can ask us to restrict processing of your data in certain circumstances.
• Data portability: Where processing is based on consent or contract, you can request your data in a portable format.
• Complaints: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

To exercise any of these rights, contact us at privacy@boltn.com. We will respond within one calendar month.

Your right to object

Where we process your personal data on the basis of legitimate interests — specifically, responding to contact form enquiries — you have the right to object to that processing.

If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

To object, contact us at privacy@boltn.com.

Automated decision-making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects. No decisions about you are made by automated means.

Cookies

This site uses cookies in limited circumstances — specifically, functional cookies set by the Cal.com booking widget. Vercel Analytics is cookieless and sets no cookies. For full details on what cookies are used and why, see our Cookie Policy.

Changes to this policy

We may update this policy from time to time as our services change or as legal requirements evolve. The "Last updated" date at the top of this page will always reflect the most recent version. We recommend checking back periodically if you have an ongoing relationship with us.