01
Who is responsible
IRWELLCORE LTD, trading as IrwellCore, is the data controller for the personal information described in this notice. The company is registered in England and Wales under number 17442615. Its registered office is 2 Bland Street, Manchester, United Kingdom, M16 7AL.
For privacy questions or requests, email info@irwellcore.co.uk or call 07440 034606.
02
Information we collect
Information you provide
- Your name and email address.
- Your phone number when you provide it. It is required when you choose phone or WhatsApp as your preferred contact method.
- Your preferred contact method, organisation type, project subject and preferred timing.
- Your project message and your optional email-marketing choice.
- Any other information you choose to provide during a business conversation or project.
Please do not include passwords, account secrets, special-category information or unrelated personal information in the message box.
Technical and security information
- The page path, time of submission and a random request reference.
- A hidden honeypot field and form-start time used to identify automated submissions.
- Vercel BotID results and related browser, network and security signals used to distinguish people from automated traffic.
- One-way hashes of the requesting IP address and submitted email address, held briefly to enforce rate limits without retaining those values in the in-memory limiter.
- Standard hosting information, which can include IP address, browser or device details, requested pages, timestamps and security events.
Most information comes directly from you. Technical information comes from your browser, device and the services used to operate and protect the website.
03
How and why we use it
Answering enquiries
We validate, deliver and reply to the enquiry and send an acknowledgement. We rely on taking steps at your request before a contract and, where relevant, performing a contract.
Managing business relationships
We organise enquiries, follow up and keep suitable records. We rely on our legitimate interest in operating the consultancy and serving prospective and current clients.
Security and troubleshooting
We prevent abuse, apply rate limits and diagnose failed deliveries. We rely on our legitimate interest in keeping the website and business systems secure and reliable.
Optional marketing
We send occasional IrwellCore offers and service updates by email only when you tick the optional box. We rely on your consent, which you may withdraw at any time.
Required business records
We may retain records needed for tax, accounting, disputes or other legal requirements. We rely on legal obligations and our legitimate interest in establishing or defending legal claims.
IrwellCore does not use the enquiry form to make decisions that produce legal or similarly significant effects. BotID may reject a request that appears automated; you can contact us by email or phone if that happens.
04
Who receives it
IrwellCore and its email provider
The business mailbox receives the enquiry so it can be reviewed and answered. Access is limited to people who need it for the enquiry or service.
Resend
Resend processes the enquiry details to deliver the internal notification and the acknowledgement sent to you.
HubSpot
When enabled, HubSpot is searched by email and may store contact details, lead status, owner assignment, project choices and marketing preference so the enquiry can be managed.
Vercel
Vercel hosts the website, routes requests, keeps operational security logs and verifies the BotID challenge.
WhatsApp and Cal.com
If you choose WhatsApp or use the optional Cal.com booking link, that service receives the information needed for the contact or booking under its own privacy notice.
Professional and legal recipients
Information may be shared with professional advisers, insurers, regulators, courts or law-enforcement bodies where reasonably necessary or legally required.
05
International transfers
Resend, HubSpot, Vercel and Cal.com are international providers and may process information outside the United Kingdom, including in the United States. Where UK personal information is transferred to a country without UK adequacy regulations, we rely on the provider’s contractual protections, such as the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
Contact us if you want more information about the safeguard used for a particular provider or a copy of the relevant terms.
06
How long we keep information
- Enquiries that do not become client work, including related mailbox and HubSpot lead records, are kept for up to 24 months after the last meaningful contact.
- Client, proposal and project records may be kept for up to six years after the last transaction or the end of the engagement where needed for tax, accounting, contract or legal-claim purposes.
- Marketing preferences are kept until you withdraw consent. We review inactive marketing records after 24 months and may keep a minimal suppression record so we do not contact you again.
- Hashed IP and email rate-limit entries stop affecting submissions after ten minutes and exist only in the running server process.
- Delivery and security logs are kept for the shortest period reasonably needed to deliver messages, investigate problems, prevent abuse and meet provider or legal requirements.
The website does not maintain its own enquiry database. Copies can remain in the business mailbox, Resend records, HubSpot and Vercel logs for the periods above or the shorter periods applied by those services. We delete or anonymise information when it is no longer needed, unless a legal hold or obligation requires longer retention.
07
Your choices and rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase your information; restrict or object to its use; receive a portable copy; and withdraw consent. Some rights apply only in particular situations.
Your right to object: you may object to processing based on legitimate interests. You may object to direct marketing at any time, and we will stop using your information for that purpose.
Email info@irwellcore.co.uk with enough information to identify the relevant record. We may ask for proof of identity before disclosing or changing information. We normally respond within one calendar month, subject to any lawful extension.
If you remain concerned after contacting us, you may complain to the Information Commissioner’s Office.
09
Contact and changes
For a privacy question or request, email info@irwellcore.co.uk or call 07440 034606. We update this notice when our information practices, providers or legal duties change. The date at the top shows the latest update.
Return to the IrwellCore website