Privacy policy

Last updated: 13 April 2026

This policy explains how personal data is collected and used when you use andigladwin.com (the “site”). The data controller is Operandi Magic Ltd (“we”, “us”), which operates the site on behalf of Andi Gladwin.

What we collect and why

Contact form

If you use the contact form, we ask for your name, email address, and message. We use this information to read and respond to your enquiry. Our lawful basis under UK GDPR is legitimate interests (responding to people who contact us) and, where relevant, steps taken at your request before entering into a contract.

Hosting and security

The site is hosted on Cloudflare Pages. Cloudflare may process technical data such as IP address, browser type, and request logs for delivery, performance, and abuse prevention. Where personal data is involved, Cloudflare acts as a processor on our instructions.

Email delivery

Messages from the contact form are sent using ZeptoMail (Zoho). Zoho processes the content of your message and your contact details only to deliver email to us. Zoho acts as a processor.

Retention

We keep correspondence sent via the contact form for as long as needed to handle your enquiry and for a reasonable period afterwards (for example, to deal with follow-up questions or disputes), typically up to 24 months unless the law requires otherwise.

Cookies

The site is designed to work without non-essential tracking cookies. Our hosting provider may set strictly necessary cookies or similar technologies required for security or delivery (for example, bot management). We do not use advertising cookies on this site.

Your rights

Under UK data protection law you may have the right to access, correct, erase, or restrict processing of your personal data, and to object to certain processing. You may also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise your rights or ask a question about this policy, contact us via the contact form and mention Privacy at the start of your message so we can prioritise it.

International transfers

Some of our service providers may process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK law (such as the UK International Data Transfer Agreement or UK Addendum, or adequacy regulations), as applicable.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Please check this page occasionally.