Introduction
Shane Dowley Consulting Ltd is committed to protecting and respecting your privacy. This policy explains the personal information we may receive, how it may be used and the choices and rights available to you.
If you have a question or concern about how your personal information is handled, email shane@shanedowley.com.
Who we are
This website is operated by Shane Dowley Consulting Ltd, a UK-based consulting and coaching business. Shane Dowley Consulting Ltd is the controller responsible for personal information handled for the purposes described in this policy. The website address is shanedowley.com.
Information we may receive
The information we receive depends on how you choose to interact with us. It may include:
- your name and email address;
- your organisation, if you choose to provide it;
- the content of an enquiry or other correspondence; and
- information required for invoicing, accounting or other applicable legal obligations.
GitHub Pages (where this site is hosted) and Formspree may also process technical or security information needed to deliver and protect their services. This does not mean that every item of service or security information is visible to Shane Dowley Consulting.
How information is used
Personal information may be used to:
- respond to and manage professional enquiries and ordinary business correspondence;
- arrange services and manage a prospective or ongoing business relationship;
- protect the website and contact form from misuse;
- maintain invoices, accounting information and other necessary business-administration records; and
- meet legal, regulatory, tax or accounting obligations, or establish, exercise or defend legal claims, where applicable.
Lawful bases for processing
The lawful basis depends on the context in which information is provided and used. The bases that may apply are:
- Contract — where processing is needed to take requested steps before entering into an agreement or to provide agreed services.
- Legitimate interests — where processing is needed to respond to and manage professional enquiries, handle ordinary business correspondence and administration, or protect the website and form from misuse, provided those interests are not overridden by your rights.
- Legal obligation — where information must be handled or retained to meet an applicable legal or regulatory requirement.
Submitting the Contact form is not treated as consent to marketing.
Contact enquiries and Formspree
The Contact form asks for your name, email address, organisation if you choose to provide it, and enquiry message. When you submit the form, this information is sent directly from your browser to Formspree, which provides the website's contact-form service and processes the submission on behalf of the business.
Submission Archive is enabled. On the current Formspree Free plan, submission history is stored in the Formspree dashboard for 30 days. Formspree also sends a notification containing the submitted information to shane@shanedowley.com.
Formspree may process technical information associated with a submission for service operation, security and fraud or spam prevention. It may retain technical and security records separately under its own retention practices; these records are not covered by the 30-day submission-history period and are not necessarily visible to Shane Dowley Consulting Ltd.
Formspree uses infrastructure in the United States, so using the Contact form can involve international processing. Formspree says that it takes steps to ensure personal information transferred outside Europe continues to receive appropriate protections.
You can instead make an enquiry directly by emailing shane@shanedowley.com.
Arranging an intro call
The “Arrange an intro call” links take you to Calendly. Calendly is not embedded in this website and no Calendly script runs here. If you follow the link and provide information to Calendly, that information is handled under Calendly's own privacy arrangements.
Third-party services and links
The website also contains a normal outbound link to LinkedIn. LinkedIn is not embedded in the website and no LinkedIn script, pixel or software development kit runs here. If you follow an external link, the destination service operates under its own terms and privacy practices.
This website is a static site hosted with GitHub Pages. It has no application server, database or content-management system. GitHub says that visitor IP addresses are logged and stored for security purposes when a GitHub Pages site is visited. Shane Dowley Consulting does not operate or receive GitHub access logs and does not use them for site analytics.
Cookies and analytics
The website code does not set cookies and does not load analytics, advertising trackers, marketing cookies, session-replay tools, behavioural-tracking technology, third-party embeds or external font services.
External websites reached through links from this site may use cookies or similar technology under their own privacy arrangements.
Who information is shared with
Shane Dowley Consulting does not sell personal information. Information may be shared where needed with service providers supporting website hosting, the contact form, email delivery or ordinary business administration. This includes Formspree when you use the Contact form. Information may also be disclosed to a legal or regulatory body where required by law.
How long information is kept
While Submission Archive is enabled, the current Formspree Free plan stores contact-form submission history in the dashboard for 30 days. Formspree may keep separate technical or security records under its own retention practices.
Enquiries and correspondence, including notification emails, are kept only for as long as reasonably needed to respond, manage a prospective or ongoing business relationship, meet applicable legal or accounting obligations, or establish, exercise or defend legal claims. The relevant period depends on the nature of the information and the relationship involved.
Shane Dowley Consulting Ltd. does not retain coaching notes or service records.
Your data-protection rights
Depending on the circumstances, UK data-protection law may give you rights to:
- ask for access to your personal information;
- ask for inaccurate information to be corrected;
- ask for information to be deleted;
- ask for processing to be restricted;
- object to certain processing;
- receive certain information in a portable form; and
- withdraw consent where processing relies on consent.
These rights are not absolute and may depend on the circumstances. To make a request, email shane@shanedowley.com.
Security
Reasonable technical and organisational steps are taken to protect personal information. No website, email system or storage method can be guaranteed to be completely secure.
Changes to this policy
This policy may be updated when the website, services, third-party arrangements or legal requirements change. The latest version will be published on this page with an updated date.
Contact
For privacy questions, rights requests or concerns about how your information is handled, email shane@shanedowley.com.
Postal address: 14 Tydeman Road, Portishead, Bristol, Avon, United Kingdom, BS20 7LS.
Complaints
Data Protection Complaints Policy
This section explains how Shane Dowley Consulting Ltd. receives, investigates and responds to concerns about the handling of personal information.
What counts as a data-protection complaint?
A data-protection complaint is an expression of dissatisfaction about how personal information has been handled. You do not need to use legal terminology or refer to particular legislation for a concern to be treated as a complaint.
How to submit a complaint
You can submit a complaint by:
- Email: shane@shanedowley.com
- Post: 14 Tydeman Road, Portishead BS20 7LS
If somebody submits a complaint on your behalf, evidence that they are authorised to act for you may be requested.
How a complaint is handled
- Acknowledgement. The complaint will be acknowledged in writing within 30 days.
- Investigation. The circumstances will be reviewed without undue delay and any enquiries needed to understand what happened will be made.
- Communication. You will be kept informed of progress, particularly if the matter is complex.
- Outcome. You will receive a written explanation of the outcome and any remedial action taken.
Escalation to the Information Commissioner's Office
If you are dissatisfied with the outcome or handling of a complaint, you can raise the matter with the UK Information Commissioner's Office. The ICO provides current guidance on making a data-protection complaint.
Complaint records
A record of a complaint may include the date it was received and acknowledged, the investigation and evidence considered, the outcome, the reasons for the decision, and any remedial action taken. Complaint records are retained only for as long as reasonably necessary for complaint handling, accountability and applicable legal requirements.
Policy review
This complaints policy is reviewed annually. The next scheduled review date is 1 June 2027.