Privacy
This page explains what Tech Shinobi collects, why it is used, and how lightweight analytics are handled.
Jack Garratt, trading as Tech Shinobi, is a UK-based website design and development business. For the personal information described in this policy, Jack Garratt is the data controller.
Business correspondence address: 3 Hollydene Crescent, Bulwell, Nottingham, NG6 8QX, United Kingdom.
For privacy questions or requests, contact enquiry@techshinobi.co.uk.
When you send an enquiry or project brief, the submitted details are used to respond to you, understand your project, prepare a quote, and provide agreed services. A short-lived, pseudonymous technical log is also kept to help prevent spam and diagnose delivery problems; it does not retain the raw IP address.
This may include your name, email address, business name, website, project goals, budget range, timeline, and any information you choose to include in the form.
We use this information to take steps at your request before entering into a contract, to perform a contract where one is agreed, and to maintain the related business records.
If you choose to use the Project Chat widget, we collect your name, email address, and message so we can answer your question and continue the conversation. The widget can match questions against approved Tech Shinobi information, but it does not use generative AI to create replies.
A short-lived browser session identifier is created only after you send a chat message, so the conversation can remain visible in that browser session. Project chat conversations are removed from the website system after 30 days. Notification or reply emails may be retained in the relevant mailbox under its separate mailbox retention settings.
With your consent, the website uses first-party analytics to understand incoming traffic, popular pages, devices, referrers, and approximate location trends. We do not use this custom analytics system for advertising or behavioural profiling.
The analytics system records pages and page titles viewed, timestamps, referrer host, device category, viewport size, language, timezone, approximate location, a pseudonymous visitor identifier, and the page currently visible while a visitor remains active. It does not retain your raw IP address in its own analytics records.
Approximate location is derived from IP geolocation. The IP address is used briefly during the request and may be sent to FreeIPAPI and IPWhois to generate country, region, city, and coordinate estimates. It is then replaced in the custom analytics system with a one-way pseudonymous identifier. These location estimates are not precise device locations and may be inaccurate for mobile networks, VPNs, corporate networks, proxies, or privacy tools.
The public website uses browser storage to remember your analytics choice. If you accept analytics, it also uses session storage to group activity during the current browser session. You can change or withdraw your analytics choice at any time.
The protected CMS uses a secure session cookie only for admin login.
We may process technical information where reasonably necessary to protect the website and its users, including investigating malicious traffic, unauthorised access attempts, spam, and service abuse.
Hosting providers may also generate server access logs containing IP addresses, request information, timestamps, browser information, and error or security events. These records are separate from the custom analytics system and are managed under the hosting provider's own retention arrangements.
We process enquiry and project information where it is necessary to take steps at your request before a contract or to perform an agreed contract. We process custom website analytics only with your consent.
We may process limited technical information for our legitimate interests in keeping the website, systems, and services secure and reliable, where those interests are not overridden by your rights and freedoms.
Unsuccessful enquiries and project briefs are normally deleted within 12 months of the last contact. Client and project records are retained only for as long as needed to provide services and meet legal, tax, or accounting obligations.
Analytics logs, pseudonymous repeat-visitor records, geolocation cache data, and the technical contact-submission log are removed after 30 days by a scheduled daily cleanup task. Live activity records are removed after two minutes. Project chat conversations are also removed from the website system after 30 days.
Hosting-provider logs may follow a different retention period set by that provider.
Payment, quote acceptance, and early-start records are retained for up to six years after the relevant project or service ends where reasonably necessary for accounting, contractual, and legal-claim purposes.
We do not sell personal information. Information may be processed by providers needed for hosting, email, payment processing, project delivery, and approximate IP geolocation, including Hostinger, Stripe, FreeIPAPI, and IPWhois.
Some providers may process information outside the UK. Where an international transfer requires safeguards under applicable data protection law, we will use the relevant transfer mechanism.
Depending on the circumstances, you may request access to, correction of, deletion of, restriction of, or object to the processing of your personal information. You may also have a right to data portability and may withdraw analytics consent at any time. To make a request, email enquiry@techshinobi.co.uk.
If you are unhappy with how your personal information has been handled, contact us first at enquiry@techshinobi.co.uk. You may also raise a concern with the UK Information Commissioner's Office at ico.org.uk.