1. Who is responsible
Hockham & Co Ltd is the data controller for the information described here.
- Company
- Hockham & Co Ltd, registered in England and Wales
- Company number
- 17423563
- Registered office
- 1 Top End, Renhold, Bedford, England, MK41 0LR
- Contact
- ben@hockhamandco.co.uk
2. What I hold
Only what you put in an email: your name, your email address, and whatever you choose to tell me about your business. I do not buy data, and the site cannot gather it — there is nothing here to fill in.
Separately, because the site is served through Cloudflare, Cloudflare processes request data including your IP address in order to deliver pages and defend the site. That happens for every visitor, get in touch or not.
3. Why, and on what legal basis
- To reply to your enquiry. Legitimate interests — you emailed me asking a question, and answering it is the obvious thing to do with your message.
- To keep the site running and secure. Legitimate interests — this covers the request data Cloudflare handles.
- To deliver work, if we start working together. Performance of a contract.
4. Who else handles it
Five companies, each doing one job.
- Microsoft
- Microsoft 365 — email, and storing, editing and managing documents and spreadsheets. Includes Copilot, Microsoft's AI assistant, which works across that content.
- Atlassian
- Client records and internal business records.
- Anthropic
- AI processing only. Content is processed within a session and not stored beyond it.
- Cloudflare
- Hosting and delivery. Processes request data, including IP addresses, for every visit.
- Fonts only. Your browser requests the font files, so Google receives your IP address.
Microsoft stores my email, files and business records in the United Kingdom. Some ancillary Microsoft services — spam and malware filtering, for instance — carry no regional storage commitment, so a limited amount of processing may happen outside the UK under Microsoft's standard data protection terms. Atlassian, Anthropic, Cloudflare and Google all operate internationally and may process data outside the UK under their own data protection terms.
5. How long I keep it
Business and client records are kept for six years from the end of the relevant financial year, which is what UK company and tax law requires.
Enquiries that lead nowhere are deleted once it is clear there is nothing to pursue. I would rather not keep a filing cabinet of conversations that went quiet.
6. Your rights
Under UK GDPR you can ask me to give you a copy of what I hold, correct it, delete it, or stop using it — and you can ask for it in a portable form. Email ben@hockhamandco.co.uk and I will deal with it.
If you are not satisfied with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk. I would appreciate the chance to put it right first, but that is your call, not mine.
7. Cookies and analytics
There are none. No cookies, no analytics, no tracking of any kind. The two external services that see anything at all are covered in the cookie policy.