Bosware ConsultPrivacy
Privacy notice
Last updated: 15 October 2026
This explains, in plain English, what happens to your personal information when you visit this website, get in touch, or work with me.
The short version
- This website uses no cookies, no analytics and no tracking.
- I only have the information you choose to send me, and I use it to reply to you and do the work.
- I never sell your information, and I don't let AI tools train on it.
- If we don't end up working together, I delete your enquiry within 12 months.
- You can ask to see, correct or delete your information at any time.
Who I am
Bosware Consult is run by me, Jonathan, an AI Automation Specialist working with small businesses in the UK and Australia. I'm responsible for the personal information described in this notice (in legal terms, I'm the "controller").
Questions or requests: email jonathan@bosware.com.
This website
- No cookies, analytics or tracking. The site doesn't set cookies, and there are no analytics, advertising pixels or tracking scripts.
- The "Tell me briefly about your business" tool runs in your browser. What you type is not sent to me or stored anywhere. If you click to send the email it suggests, it opens in your own email app, and nothing is sent until you press send.
- No third-party requests. Fonts and everything else on the site are served from the same host. Your browser does not contact Google or any other third party just to load the page.
- Hosting. The site is hosted on Cloudflare Pages. Cloudflare processes your IP address and basic technical details (such as browser type and the pages requested) as needed to deliver the site and keep it secure.
What I collect when you get in touch
When you email me, or contact me through a platform such as Bark, LinkedIn or Facebook, or by phone, I'll have:
- your name, email address and phone number (if you give it)
- your business name and which country you're in
- what you tell me about your business and what you need
- our emails and my notes from any calls
If you become a client, I'll also keep invoicing details (business name, billing address, invoices and payments) and project notes. If the work means I need access to your systems, such as your email, calendar or customer records, we'll agree that in writing first in a data processing agreement, which explains how I protect that data.
Please don't send me sensitive information, such as health details, about yourself or anyone else. I don't need it.
Why I use it, and the legal basis
| What I use it for | Legal basis (UK GDPR) |
|---|---|
| Replying to your enquiry, having a free chat and preparing a plan or quote | Legitimate interests (responding to a request you made), and taking steps you asked for before a contract |
| Doing the work, providing support and invoicing | Contract |
| Keeping accounts and tax records | Legal obligation |
| The occasional email with useful updates, only if you've asked for them, or you're a client or have enquired and haven't opted out | Consent, or the "soft opt-in" for existing contacts. You can unsubscribe at any time with one click or a quick reply. |
| Keeping my systems secure and dealing with any questions or disputes | Legitimate interests |
For people in Australia: I only use or share your information for the reason you gave it to me, or a closely related reason you'd reasonably expect.
Who I share it with
I never sell your information or share it for anyone else's marketing. I only share what's needed with:
- Service providers that help me run the business, such as my email and cloud storage, accounting and invoicing software, video-call tools and AI tools. AI tools are used on business settings where your information is not used to train their models.
- Platforms you contacted me through, such as Bark. They also hold your information under their own privacy policies.
- My accountant, or authorities such as HMRC or the ATO, where the law requires it.
Where your information is kept
I work with clients in the UK and Australia, so your information may be held in or accessed from either country. Some of my service providers store data in other countries, such as the US or the EU. When information leaves the UK, I rely on recognised legal safeguards, such as UK adequacy regulations or the standard data transfer terms in my providers' contracts. For people in Australia, I take reasonable steps to make sure anyone overseas handles your information consistently with the Australian Privacy Principles.
How long I keep it
| Information | How long |
|---|---|
| Enquiries that don't go ahead | Deleted within 12 months of our last contact |
| Client contact details and project records | While we work together, then up to 6 years after the work ends, in case of questions or legal claims |
| Invoices and financial records | As long as tax law requires: 6 years in the UK, 5 years in Australia |
| Access to your business systems, and any of your data I hold | Access is removed when our work ends, and your data is returned or deleted as set out in our agreement |
| Email updates list | Until you unsubscribe. After that I keep only your email address on a "do not contact" list so I don't email you again. |
How I keep it safe
My files are password-protected and stored on encrypted devices and secure cloud services with two-factor authentication. Only I have access. I use reputable services with proper privacy settings, and I keep personal information out of places it doesn't need to be.
Your rights
In the UK (UK GDPR and the Data Protection Act 2018)
You have the right to:
- know how your information is used (this notice)
- get a copy of the information I hold about you
- have anything wrong corrected
- have your information deleted
- ask me to limit how I use it, or object to how I use it
- stop marketing emails at any time
- get your information in a portable format
- withdraw your consent at any time, where I'm relying on it
I don't make decisions about you using fully automated means. I'll reply to any request within one month, and it's normally free. If you're unhappy with how I've handled your information, please tell me first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
In Australia (the Australian Privacy Principles)
Many small businesses are exempt from the Privacy Act 1988, but I choose to follow the Australian Privacy Principles anyway. You can:
- ask for access to the information I hold about you
- ask me to correct it if it's wrong, out of date or incomplete
- ask a general question without giving your name, where that's practical
- opt out of marketing emails at any time
If you have a privacy complaint, email me and I'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
Children
My services are for businesses and aren't aimed at children.
Changes to this notice
If anything changes, such as how I work or the tools I use, I'll update this page and the "Last updated" date at the top.
Contact me
Jonathan, Bosware Consult
Email: jonathan@bosware.com
Putting "Privacy" in the subject line helps me spot your message quickly.