Keene Development

Privacy notice

How Keene Development handles website visits and enquiries.

Last updated: 20 September 2026

Who is responsible

Keene Development Limited is the controller of the personal information described here. It is registered in England and Wales, company number 10048458. Its registered office is care of Aardvark Accounting, 1 Cedar Office Park, Cobham Road, Wimborne, England, BH21 7SB. Contact [email protected] about this notice or your information.

Information we use

If you use the enquiry form, we receive your email address, your name if you provide it, the topic you select and the message you choose to send. The email address is required so we can reply. Please do not include passwords, credentials, sensitive personal information or confidential client material.

Cloudflare processes connection information such as IP address, browser and device information, the requested page, time and security signals to deliver and protect the site. Cloudflare Turnstile assesses whether a form submission is likely to be automated. A short-lived verification token is checked by the contact Worker before an enquiry can be accepted.

Why we use it and the lawful bases

We use enquiry information to understand and respond to your request, discuss a possible engagement and keep an appropriate record of the conversation. For business enquiries this is based on our legitimate interests in responding to people who contact us and running the consultancy. Where you personally ask us to take steps towards a contract with you, the relevant processing may instead be necessary for those pre-contract steps.

Protecting the site, limiting abuse and maintaining security are based on our legitimate interests in providing a safe and reliable contact route. Where records are required by law, we rely on the relevant legal obligation. Sending an enquiry does not subscribe you to marketing.

Who receives information

Cloudflare provides the website hosting and delivery, the contact Worker, Turnstile, rate limiting and email-sending service. Accepted enquiries are sent to Joe’s business inbox, provided by Google Workspace. These providers process information as needed to provide their services and under their applicable data-processing terms.

We may also share necessary information with professional advisers or competent authorities where needed for a legal obligation, professional advice or a legal claim. We do not sell enquiry information. LinkedIn and external font providers are separate services with their own privacy information.

Security checks, cookies and fonts

This website does not use advertising pixels, audience analytics or mailing-list trackers. It does not save enquiry text to cookies, local storage or session storage. Turnstile is loaded when the form is approached or used and may process device and browser signals for the security check. Turnstile pre-clearance is not enabled. See Cloudflare’s privacy policy and Turnstile privacy information.

Inter is loaded from rsms.me and IBM Plex from Google Fonts, so those providers receive the connection information needed to deliver the font files. The page uses system fonts if those requests are unavailable.

Storage, logs and retention

The contact Worker does not write enquiry content to a database or deliberately log names, email addresses, message text or Turnstile tokens. It uses hourly rotating, keyed hashes rather than raw email addresses or IP addresses as rate-limit keys. Worker observability is enabled at a 1% invocation sample and the account’s current Workers plan makes those sampled logs available for up to seven days. Cloudflare Email Service message previews are disabled for the sending domain; delivery analytics, which can include message metadata and delivery status, are available for 31 days. These provider periods are operational settings, not the business retention periods below.

The current Google Workspace organisation setting does not automatically delete messages from inboxes or archives. Accepted enquiries therefore remain in Joe’s mailbox until they are deleted through the review process below; Gmail permanently deletes messages from the Bin after 30 days. Google makes Email Log Search data available for 30 days and Gmail log events for six months; administrators cannot shorten those provider-set log periods. Google Vault is not currently available to the admin account, so no Vault retention rule is relied on for this form.

Enquiries that do not become engagements are kept for up to 12 months after the last meaningful contact. They are deleted earlier when no longer needed. The business inbox is reviewed at least quarterly for enquiries reaching that point; the review date and any justified exception are recorded.

Necessary contractual, invoicing, final advice and related engagement records may be kept for up to seven years after an engagement ends, with the reason documented. They are deleted earlier where no longer needed. A longer legal or insurance exception must be justified and recorded.

The seven-year period is not applied automatically to client datasets, repository copies, credentials or system access. Those are returned or deleted when no longer needed under the engagement terms, and unnecessary access is removed as part of engagement close-out.

International processing

Cloudflare and Google may process information outside the United Kingdom. Where UK personal information is transferred internationally, the providers’ applicable data-processing terms use recognised safeguards such as adequacy arrangements, standard contractual clauses and the UK transfer addendum, as applicable.

Your rights

Depending on the circumstances, you can ask for access to your personal information, correction, deletion, restriction or portability, and you can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. These rights are not absolute. Contact [email protected] to make a request; we may need enough information to verify your identity.

You can complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the chance to address a concern first, but you do not have to contact us before approaching the ICO.

Automated security decisions and alternatives

Automated checks may block a form submission as suspected spam. They do not decide whether to offer consultancy services. If the form fails or you prefer not to use it, email [email protected] directly. Copying enquiry text uses your device’s clipboard and does not send it.

Changes to this notice

We will update this notice when the way we handle information changes. The date above identifies the current version.