Privacy
Policy
I keep this simple: I collect the least amount of information I need to answer you and do good work. I don't sell your data, I don't run ad trackers, and I don't share your details with anyone who isn't directly helping me run this site. This page explains exactly what is collected, why, and what you can ask me to do about it.
Who this policy covers
This Privacy Policy applies to alfrededwards.com (the "Site") and to the AI voice agent, chatbot, and automation services I provide as Alfred Edwards ("I", "me", or "my"). It describes how I handle information about visitors to the Site and people who contact me through it.
It does not cover third-party websites you reach from links on this Site, or systems I build and hand over to a client. Once a chatbot or voice agent is running inside a client's own business, that client controls the data it collects and their own privacy policy applies.
Information I collect
Information you give me directly
When you submit the "Book a Free AI Audit" form, you provide:
- Your name
- Your email address
- The message you write describing what you want to automate
All three fields are required. That's the whole form. If you email, call, or message me on social media instead, I receive whatever information you choose to include in that message.
Information collected automatically
I use Microsoft Clarity to understand how people actually use the Site. Clarity records anonymised session activity, which includes the pages you view, how far you scroll, where you move and click, your approximate location at country or region level, and your device, browser, and screen size. It also produces a replay of that activity so I can see where a page confuses people. It does not know your name, and I do not use it to identify you.
I do not run advertising pixels or ad-retargeting tools, and I do not sell anything Clarity collects. Separately, the hosting provider that serves the Site keeps standard server logs, which typically include your IP address, browser type and version, the pages requested, and the date and time of the request. Those exist for security and reliability, not for profiling you.
Information I do not collect
I do not ask for and do not want payment card numbers, government ID numbers, health information, or any other sensitive category of personal data through this Site. Please don't send it in the form.
How I use your information
I use what you send me to:
- Send you an automatic confirmation that your enquiry arrived
- Reply to your enquiry and answer your questions
- Prepare and deliver the free AI audit you requested
- Scope, quote, and discuss a possible project
- Provide services and support if we go on to work together
- Keep records of our correspondence for business and tax purposes
- Keep the Site secure and working properly
I do not use your information for automated decision-making that produces legal or similarly significant effects, and I do not add you to a marketing list from a form submission alone. If I ever start a newsletter, it will be opt-in and separate from this form.
Cookies and tracking
Nothing non-essential is set until you say yes. On your first visit a banner asks whether to allow analytics cookies. Microsoft Clarity is not loaded, and no analytics cookie is written, unless you choose Accept. Choosing Decline loads nothing. Refusing takes exactly one click, the same as accepting.
If you accept, Clarity sets first-party cookies (currently named _clck and
_clsk) to recognise a returning visitor and stitch their page views into one session. This
Site sets no advertising cookies at all.
Changing your mind: select Cookie settings in the footer of any page to reopen
the preferences centre and switch analytics on or off. Turning it off after previously accepting also
deletes the Clarity cookies and reloads the page, since Clarity cannot be stopped mid-session any other
way. Your decision is remembered in strictly necessary cookies named cookie_consent_level
and cookie_consent_user_accepted, which exist only to honour that choice.
If your browser sends a Global Privacy Control signal, it is treated as a decline automatically and you are never shown the banner.
The banner and preferences centre are powered by TermsFeed Cookie Consent, served from this domain rather than a third-party CDN. It makes no network requests of its own, so using it sends nothing about you to TermsFeed.
The Site also loads fonts from Google Fonts, which means your browser makes a request to Google's servers (see section 05).
Third-party services
These are the only third parties involved in running this Site:
Resend: contact form delivery
The audit form posts to a function on my own hosting, which uses Resend to deliver two emails: the enquiry to my inbox, and a confirmation back to the address you entered. Resend processes your name, email address, and message in order to send those, and retains a record of the sent emails on its systems. Review their privacy practices on their website before submitting if that matters to you.
Microsoft Clarity: usage analytics and session replay
Microsoft Clarity captures how the Site is used, including click and scroll behaviour, and builds heatmaps and session replays from it. Microsoft acts as a data processor for this and may also use the data in line with its own privacy statement. Clarity masks the contents of input boxes and drop-downs in every masking mode, and that cannot be switched off, so what you type into the audit form is never uploaded or visible in a replay.
Google Fonts: typography
The Site loads the Anton, Inter Tight, and JetBrains Mono typefaces from Google's font servers. Your browser sends your IP address and basic request headers to Google to fetch them. Google states that Google Fonts requests are not used to create advertising profiles.
Hosting and email
The Site is served by a third-party hosting provider, and enquiries land in an email account operated by an email provider. Both process data on my behalf so that the Site loads and I can read your message.
Five parties can technically see something: Resend sends what you type in the form, Microsoft Clarity sees how you move around the page but not what you type into it, Google sees that a browser asked for a font, my host runs the form and serves the page, and my email provider stores the message. Nobody else.
Legal bases for processing
If you are in the UK or the European Economic Area, the UK GDPR and EU GDPR require me to name a legal basis for each use of your data. Mine are:
- Consent: you chose to fill in the form and send me your details. You can withdraw consent at any time by asking me to delete your information. Consent is also the basis for the Clarity analytics cookies described in section 04, which you can refuse in your browser or by enabling Global Privacy Control.
- Performance of a contract: where I am delivering services you have engaged me for, or taking steps at your request before entering into a contract.
- Legitimate interests: running and securing the Site, keeping business records, and responding to enquiries, balanced against your rights and expectations.
- Legal obligation: retaining records where tax or other law requires it.
Sharing your information
I do not sell, rent, or trade your personal information. I do not share it for anyone else's advertising or marketing.
I will only disclose your information:
- To the service providers listed in section 05, so they can perform the function described
- Where you have asked me to, or clearly directed me to
- Where I am legally required to, for example in response to a valid legal request
- To establish, exercise, or defend legal claims
- To a successor if my business is ever transferred, in which case this policy continues to apply to the information transferred
How long I keep it
I keep enquiry emails for as long as they are useful for the conversation they belong to, and generally no longer than 24 months after our last contact if nothing comes of it. Records connected to actual client work are kept for as long as the relationship lasts and then for the period required by tax and accounting rules. Server logs held by my host are kept on their standard rolling schedule, which is typically a short window measured in days or weeks.
You can ask me to delete your information sooner. See section 10.
Security
The Site is served over HTTPS, form submissions are transmitted over an encrypted connection, and the accounts holding your messages are protected with strong, unique credentials and multi-factor authentication. The contact form also uses a hidden honeypot field to filter out automated spam.
No method of transmission or storage over the internet is perfectly secure, so I can't promise absolute security, but I take it seriously, and I keep the amount of data I hold deliberately small.
Your privacy rights
Depending on where you live, you may have some or all of the following rights over your personal information:
- Access: ask what information I hold about you and get a copy
- Correction: have inaccurate information fixed
- Deletion: ask me to erase your information
- Restriction or objection: ask me to pause or stop a particular use
- Portability: receive your information in a portable format
- Withdraw consent: at any time, without affecting what was lawful beforehand
- Non-discrimination: I will not treat you differently for exercising any of these rights
California residents: I do not sell or share personal information as those terms are defined by the CCPA/CPRA, and I have not done so in the preceding twelve months.
To exercise any right, email me at alfred@alfrededwards.com. I will respond within 30 days. I may need to confirm your identity first, which usually just means replying from the address you originally contacted me from.
If you are in the UK or EEA and think I've handled your data badly, you can complain to your national data protection authority. In the UK that's the Information Commissioner's Office. I'd appreciate the chance to fix it first.
Children's privacy
This Site and my services are meant for businesses and adults. They are not directed at children under 16, and I don't knowingly collect information from them. If you believe a child has sent me personal information, contact me and I will delete it.
International transfers
I operate from the United States, and the service providers described above may process and store data on servers in the United States and other countries. If you contact me from outside the United States, your information will be transferred to and processed there, where data protection law may differ from the law in your country. Where a transfer of UK or EEA data requires a safeguard, I rely on the provider's standard contractual clauses or an equivalent approved mechanism.
Changes to this policy
If I change how I handle information, I'll update this page and change the "Last updated" date at the top. Material changes will be made clear on the page rather than buried. Continuing to use the Site after an update means the revised policy applies to you.
Contact
Questions about this policy, or about anything I hold on you:
- NAME
- Alfred Edwards
- alfred@alfrededwards.com
- SITE
- alfrededwards.com
- RESPONSE
- Within 30 days, usually far sooner
← BACK TO SITE