Privacy
Privacy notice
This site collects as little personal data as it can: only what you type into the contact form or the lead pipeline demo. There is no analytics, no advertising and no tracking. Last updated 2026-10-02.
Who is responsible for your data
boyt.dev is run by Adam Boyt, a self-employed sole trader trading as boyt.dev. I decide how your data is used, which makes me its "controller" under UK data protection law. I use it only to deal with your enquiry and, if we work together, to work with you. Nothing else.
For any question about your data, email adam@boyt.dev.
What I collect, why, and for how long
| Where | What | Why, and the legal basis | Kept for |
|---|---|---|---|
| Contact form | Your name, email address, company (if given), topic and message. | To read, track and reply to your enquiry. It is emailed to my inbox and saved in my CRM. Legal basis: my legitimate interest in answering enquiries, or taking steps you've asked for before we agree any work. | 6 months, then deleted automatically from this site. Copies in my email inbox and CRM are deleted on the same schedule. If we go on to work together, your contact details and our correspondence are kept for as long as we work together, and project records such as contracts and invoices for as long as tax law requires. |
| Lead pipeline demo | Your name, email address and the topic you chose. | To run the demonstration you asked for: saving a test contact in a demo CRM account and emailing you a test alert. Legal basis: my legitimate interest in providing the demo you requested. | Deleted automatically after 60 minutes, from this site and from the demo CRM. The test alert stays in your own inbox. |
| Quote calculator | Nothing personal. Your choices are kept only in the page's web address. | To show you an estimate. | Not stored. |
Your IP address
When you send either form, your IP address is used to limit how many messages can be sent in a short time, which stops the forms being abused. It is never stored as it is: the site keeps a scrambled, one-way version (a salted hash) next to your message. The scrambling key changes every time the server restarts, after which the stored version can't be linked back to any IP address.
Cookies
One cookie, called theme, and only if you pick a colour theme with the switcher at the top of the
page. It remembers your choice for 365 days and is used for nothing else. Choosing
"Auto" deletes it.
There are no analytics, advertising or tracking cookies. Fonts and scripts are served from this site itself, so loading a page doesn't contact Google or any other third party. The one exception is the bot check on the two forms, below.
Services that handle data for me
These providers process data on my behalf, under their own data protection terms. None of them may use it for their own purposes.
| Provider | What it does | Where |
|---|---|---|
| DigitalOcean | Runs this website and stores its database and backups. | London, UK |
| Migadu | Email for boyt.dev: sends the demo's test alerts, and delivers contact form enquiries to my inbox. | Europe (Migadu is a Swiss company) |
| HubSpot | My CRM and help desk, where contact form enquiries are saved. The demo uses a separate HubSpot account, so demo entries and real enquiries never mix. HubSpot keeps deleted records in a recycle bin for up to 90 days before removing them permanently. | EU (Germany) |
| Cloudflare | Turnstile, the "verify you are human" check on both forms. It processes your IP address and browser details to tell people from bots. See Cloudflare's privacy policy. | Worldwide network |
Migadu keeps data in Europe, which UK law recognises as protecting personal data adequately. HubSpot and Cloudflare are US companies certified under the UK Extension to the EU-U.S. Data Privacy Framework, which UK law recognises for transfers to the US; both also include standard data protection clauses in their terms.
Logs and backups
The web server keeps no record of visits. If sending an email or saving to a CRM fails, the server's error log may record the email address involved, so the problem can be fixed. Logs are deleted after 30 days.
The database is backed up every night, and each backup is deleted after 14 days. So after something is deleted from the site, a copy can remain in a backup for up to 14 more days.
Keeping it safe
Everything is sent over encrypted connections (HTTPS). Stored data is only accessible to me. Contact form messages are kept in the site's database and in my email inbox, nowhere else.
Your rights
You can ask me to:
- give you a copy of the personal data I hold about you;
- correct anything that's wrong;
- delete it;
- stop or limit how I use it, or object to my using it;
- send it to you, or someone else, in a common format.
Email adam@boyt.dev. I'll reply within one month. It costs nothing.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Changes to this notice
If the way this site handles personal data changes, this page is updated and the date at the top changes too.