Privacy policy

Who I am

The controller of your personal information is GOREBLIMEY LTD, a private limited company registered in England and Wales, company number 07582417. My registered office is 42 Naunton Lane, Cheltenham, Gloucestershire, England, GL53 7BH.

Olly Gore is the director. Goreblimey Ltd is registered with the Information Commission (formerly the ICO), reference ZC217234, and pays the data protection fee. You can reach me at olly@goreblimey.com.

What I collect and why

Enquiry and contact forms: your name, email address, business details and whatever you write in the message. I use them to reply and to work out whether I can help. My lawful basis is legitimate interests, because you asked me to get in touch. If we go on to work together, the basis becomes the contract.

If you tick the box for occasional emails, my basis is your consent. Every email has an unsubscribe link, and you can ask me to stop at any time.

Update emails: if you leave your email address for updates on a page, such as PHP2Shell, I email you about that subject only, and stop when the updates end or when you ask. My basis is your consent.

The AI box: if your business does not match one of the pages, the business description you type is sent to Anthropic, which runs the Claude API, so the box can suggest ideas. Please do not type personal details or anything confidential into it. My basis is legitimate interests, to give you a useful answer.

Analytics: Google Analytics 4 measures which pages are used. It only runs if you accept analytics in the cookie banner. My basis is your consent, and you can withdraw it at any time from Cookie settings in the footer.

The AI box log: the server keeps a log of the business description typed into the box, with the token count and the cost. It holds no name and no IP address. My basis is legitimate interests, to run the box and keep its cost under control.

Server logs: the hosting server keeps standard logs, such as IP address and pages requested, for security and fault finding. My basis is legitimate interests.

I do not sell your information and I do not use it for automated decisions about you.

Who handles it for me

Hosting: AWS Lightsail, in the London region (eu-west-2). Form enquiries are stored on that server in a file (leads.jsonl).

Email: Resend sends the notification of your enquiry to me and the confirmation to you. It processes your name, email address and message, and keeps its account data, including email logs, in the United States.

AI box: Anthropic receives the business description you type. Anthropic's commercial terms say it does not train its models on customer content sent through the API. Its privacy policy explains how it handles data.

Analytics, if you accept: Google, through Google Analytics 4.

International transfers: Anthropic and Resend are US companies. Google may also process analytics data outside the UK. These transfers are covered by the providers' data processing terms, which use the UK's approved safeguards for international transfers. See the Anthropic data processing addendum, the Resend data processing addendum and the Google Ads Data Processing Terms.

These providers act on my instructions. I may also share information where the law requires it.

How long I keep it

Enquiries: for up to 24 months after we last spoke, then I delete them, unless you become a client. Client records are kept as long as needed for the work and for accounting and tax rules.

Update sign-ups: until the updates end or you ask me to stop, then I delete them.

The AI box log (business description, token count and cost, with no name and no IP address) is kept for 12 months, then deleted. Anthropic deletes API inputs and outputs within 30 days by default, unless they are flagged for misuse or the law says to keep them, under its data retention policy.

Analytics data, if you accept it, is kept for the period set in Google Analytics.

Your rights

Under UK data protection law you have the right to:

• be informed about how your information is used (this page)
• see the information I hold about you
• have wrong information corrected
• have your information erased
• restrict how I use it
• take your data in a portable form
• object to processing based on legitimate interests
• challenge a significant decision made about you solely by automated means, and have a person review it

Email olly@goreblimey.com and I will reply within one month. Where I rely on consent, you can withdraw it whenever you like.

Complaints

Please tell me first and I will try to put it right. I will acknowledge a complaint about your data within 30 days, and tell you what I am doing about it. You can also complain to the Information Commission at ico.org.uk/make-a-complaint or on 0303 123 1113.

I may update this page. This page is a plain description of what I do. It is not legal advice.