Privacy.

No analytics, no advertising, no tag manager, no tracking pixels, and no third-party requests when a page loads. Nothing about your visit is used to build a profile, and no data is sold, rented, or shared for marketing.

Nor does the site set cookies. It stores one value in your browser, ss-theme, which records whether you chose light or dark. It never leaves your device and we cannot read it. Clearing site data removes it.

The site is served by Vercel, which processes the metadata of each request: your IP address, the page you asked for, and your browser’s user-agent string. It uses them to deliver and protect the site. That is a normal function of hosting and not something we have added, but it is real, and a privacy notice claiming otherwise would be wrong.

The contact form takes your name, your email address, and your message. Nothing is transmitted until you submit it.

Submitting posts the form to FormSubmit, a third-party relay that forwards it to us by email. Your message passes through their systems, so their terms apply to that step as well as ours. If you would rather not use an intermediary, email us directly at hello@staticsignal.co.uk.

The lawful basis is legitimate interest: replying to someone who has asked us a question. Once an engagement is under discussion it becomes the steps taken at your request before entering a contract.

FormSubmit and Vercel are both US companies, so a message sent through the form, and the metadata of your request to this site, may be processed outside the UK. If you would rather your enquiry did not pass through a relay at all, email us directly.

Client data under an engagement is different: processing is EU-resident, access is single-operator, and no subcontractor is engaged without written consent.

Correspondence that does not lead to an engagement is deleted within twelve months. Correspondence that does becomes part of the engagement record and is kept for six years after it closes, which is what UK company and tax law requires of business records.

Client data under processing is a separate matter and is governed by the engagement’s data processing agreement rather than by this page. Raw inputs are deleted within 30 days of acceptance. See the DPA summary.

Under the UK GDPR and the Data Protection Act 2018 you may ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our holding it at all. Write to privacy@staticsignal.co.uk and we will answer within one month.

No decision about you is made by automated means, and your data is not used for profiling.

If you are not satisfied with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.