Privacy policy

This policy covers the information collected through this website. It does not cover information exchanged during a commercial engagement, which is governed by the contract for that work.

One thing: what you type into the contact form. That is your name, your work email address, your company, the category you select, your description of the project, and — if you choose to give it — a budget range.

Standard web server logs record the request, including the originating network address, for security and abuse prevention. Those logs are not linked to form submissions and are not used to build a profile of you.

To reply to your enquiry, and to have the conversation you asked for. The legal basis is our legitimate interest in responding to a business enquiry that you initiated, and taking steps at your request before entering into a contract.

We do not use enquiry details for marketing, we do not add you to a mailing list, and we do not sell or share them with anyone outside the people at Xcelerates who need to answer you.

Enquiries are kept for 24 months from your last contact with us, so that a conversation you return to can be picked up rather than restarted. After that they are deleted.

Server logs are retained for 90 days and then rotated out.

If you would like your enquiry deleted sooner, ask and we will do it.

Delivering the form and hosting the site involves service providers acting on our instructions — a hosting provider and a transactional email provider. They process the data only to provide that service and are not permitted to use it for anything else.

We will disclose information where we are legally required to. We will not disclose it for any other reason.

You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to restrict how we use it, ask for a copy in a portable format, and object to our processing it.

To exercise any of these, use the contact form and say so — it goes to the same people. We will respond within the period the applicable law requires. If you are in the UK or the EU and you are not satisfied with our response, you may complain to your national supervisory authority.

The site is served over HTTPS. Form submissions are validated server-side and rate-limited. Access to enquiry data is limited to the people who need it to reply.

If this policy changes materially, the date at the top of this page changes with it. Previous versions are recorded in the version control history of this site.