What this site collects, and why.
Very little, and nothing from Google unless you allow it. This notice sets out what is collected, what I do with it, who else handles it and the rights you have over it.
Who is responsible
Cornhill Cyber Ltd is the controller of the personal data this notice describes. Registered in England and Wales, company number 17262195. Registered office: International House, 36-38 Cornhill, London EC3V 3NG. In this notice, “I” and “me” mean Cornhill Cyber Ltd, which Matthew Carr runs. For anything about your data, write to enquiries@cornhillcyber.com.
Analytics, if you allow it
If you select Allow when the site asks, Google Analytics records how you use it: which pages you read, how you arrived, the kind of device and browser you use, and roughly where you are, down to the town or city. Google works that out from your IP address, which Google Analytics does not store. It sets two cookies so that it can recognise your browser from one page, and one visit, to the next.
I use the totals to see which pages are read and to make the site better, not to identify anybody. The lawful basis is your consent. The site tells Google that you agreed to analytics only, and that the data may not be used for advertising. Google keeps the detailed data for two months; after that, only totals that identify nobody remain.
You can withdraw consent at any time with Cookie settings, at the foot of every page. The site then deletes the analytics cookies and stops counting your visits.
When you visit
Vercel Inc. hosts this site. Like any web host, it receives your IP address and the details of each request, such as the page, the time and your browser, so that it can send you the page and protect the site from attack. The lawful basis is my legitimate interest in a site that works and stays secure. Vercel keeps these records only as long as it needs them for that.
When you write to me
The enquiry forms on this site send nothing themselves. Each one composes an email in your own email program, and nothing leaves until you send it. What reaches me is what you choose to write: usually your name, organisation, role and email address, and what you want to discuss. The MSP application also asks for a telephone number and details of your business.
I use it to reply, to work out with you whether I can help and, if we agree to work together, to set that up. The lawful basis is my legitimate interest in answering enquiries, or steps you ask me to take before a contract. My email provider holds the mailbox on my behalf. I keep an enquiry while the conversation is live, and for two years after the last contact if it goes no further. If you become a client, the contract sets how long records are kept.
Cookies and storage
Three things can be stored in your browser, and two of them only if you allow analytics:
_ga— Google Analytics. Tells one visitor from another. Lasts two years._ga_QVTXYX162Y— Google Analytics. Keeps track of the current visit. Lasts two years.cornhill.analytics— kept in local storage rather than a cookie, once you answer the question, whichever way. It remembers your answer so that you are asked once, and stays until you clear your browser’s data.
Nothing else on this site sets a cookie.
Who else handles it
- Google, for analytics, and only if you allow it.
- Vercel, which hosts the site.
- My email provider, which holds the mailbox enquiries reach.
Each handles the data on my behalf and under contract. I do not sell personal data, and I do not share it for advertising.
Outside the UK
Google and Vercel are based in the United States, so some of this data is processed there. Those transfers rely on the UK–US data bridge or, where it does not apply, on the UK’s International Data Transfer Addendum.
Your rights
You can ask for a copy of the personal data I hold about you, and ask me to correct it, delete it, restrict what I do with it or give it to you in a form you can take elsewhere. You can object to anything I do on the basis of legitimate interests, and withdraw consent at any time. No decision about you is made automatically. Write to enquiries@cornhillcyber.com, and I will answer within one month.
If you are not satisfied with the answer, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. I would rather hear from you first.
Changes
If this notice changes, the date at the top changes with it.