Skip to content

Privacy

Only what we need

This notice describes exactly what this site does with your data. Browsing collects nothing at all. Booking a call collects only what we need to arrange it.

It also covers WinterlineBot, the crawler we use to find businesses we might be able to help.

It’s short, because there isn’t much to declare.

Personal data we process, and why

We collect personal data in two ways: when you book a call, and when our crawler records the contact details a business publishes on its website. Each purpose is listed below, with the service used for it and the data involved.

Booking a call

Booking form, on this site

Personal data: Full name; email address; phone number, business name and industry, if you give them; the time you choose; your timezone.

Scheduling the call and sending the invite

Google Calendar and Google Meet (Google Workspace)

Personal data: Full name; email address; phone number, business name and industry, if given; the time of the call; your timezone.

Sending your confirmation email

Gmail (Google Workspace)

Personal data: Full name; email address; the time of the call.

Keeping a record of bookings

Cloudflare D1 database

Personal data: Full name; email address; phone number, business name and industry, if given; the time of the call; your timezone.

Spam and bot protection

Cloudflare Turnstile (booking page only)

Personal data: IP address; browser and device information; usage data, as described in Cloudflare’s privacy policy.

Booking limit per connection

Personal data: A one-way scrambled form of your IP address. It cannot be turned back into the address and is not stored with your booking.

Hosting and delivering the site

Cloudflare

Personal data: IP address; date and time of the request; the page requested; browser type. These are standard server logs.

Finding businesses we could help

WinterlineBot, our web crawler, and the public Companies House register

Personal data: From a company’s own website: its web address, the business email address and phone number it publishes (we prefer general inboxes such as info@ over named people’s addresses), the page each detail came from, and a short extract of page text.

How WinterlineBot works, and how to block it

Remembering who we have spoken to

Client records

Personal data: Business name; industry; the dates we spoke; a short note. No personal names, email addresses or phone numbers.

What we don’t use

No analytics, no cookies and no tracking. There is no analytics product, tag manager, advertising pixel, session recording or A/B testing tool, and the pages set no cookies and use no local storage.

The pages, typefaces, images and the moving graphic on the home page are all served from this domain. There is no embedded video, map or social widget. Cloudflare Turnstile on the booking page is the only file loaded from anywhere else.

Why we are allowed to use it

Booking details are used because you have asked us to arrange a call, which is a step you have asked us to take before any contract. Bot protection, server logs and client records rely on our legitimate interests in keeping the site secure and remembering who we have already spoken to.

Business contact details found by WinterlineBot rely on our legitimate interest in offering our services to businesses that might benefit from them. You can object to this at any time, and we will stop.

How long we keep it

Booking records in our database are deleted automatically 12 months after you book. Scrambled IP addresses are deleted after two days.

The calendar event and any emails are kept in our Google Workspace account as a record of the meeting, and are deleted if you ask. Client records are kept until you ask us to remove them. Cloudflare keeps its server logs under its own retention policy.

Extracts of page text found by WinterlineBot are deleted after 90 days. If we haven’t worked with your business, its details are deleted 12 months after our last contact with it, or 12 months after we found it if we never got in touch. If you ask us not to contact you, we keep only a one-way hash of the email address and your company number, so that we never do.

Your rights

Under UK data protection law you have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to how it is used and to complain to the regulator.

If you have never booked a call and our crawler has not found your business, we hold nothing about you. If either has happened, email us at the address below and we will tell you what we hold and delete it if you want it deleted. To stop us contacting your business, email us and we will confirm when it’s done.

Complaints

You can complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk. You don’t have to contact us first, though it is usually quicker.

Owner and data controller

Winterline Ltd
Registered in England and Wales, company number 17483433
174 Strouden Road, Bournemouth BH9 1QP
United Kingdom

Contact email: zack.parker@winterline.dev. Requests about your own data are answered within one month.

Last reviewed. 22 October 2026. This notice describes the site as built on that date. If we add any tracking, or ask for anything the booking form doesn’t already ask for, this notice is updated before that change goes live.

AI strategy, systems, and support for UK businesses.