Muckett[email protected]

Privacy notice

Updated 11 November 2026.

Who looks after your information

I'm Tom Hepworth-Harvey, trading as Muckett, a sole trader in Colne, Lancashire. I'm the controller of the personal information described here. Email [email protected].

Postal address: 82 Castle Road, Colne, BB8 7DS. ICO registration is shown in the footer below.

Enquiries and clients

If you contact me, I use your name, email, phone number if you ring or give it, website address and anything you choose to tell me to answer your enquiry and prepare a quote. This is to take steps you request before entering a contract, or to perform our contract. For company representatives, my legitimate interest is handling the company's enquiry. The current website form prepares a draft in your email app; you choose whether to send it. It does not store your details on this site.

For clients I also keep agreed work, correspondence, invoices and payment records. I keep accounting records to meet legal obligations.

If I host your website, any personal information that passes through it, such as visitors' network information handled by Cloudflare, is processed on your behalf. You stay the controller for your own customers' information; I act as your processor and only handle it to run the site for you.

If I emailed your company first

I may contact local limited companies at business email addresses published on their own websites, to offer relevant website checks and repairs. This can include a named employee's work address. I use the company name, website, published business contact details, source and contact history. My lawful basis for personal information is legitimate interests: finding customers for my web services, balanced against the recipient's privacy and reasonable expectations. Public availability does not remove your privacy rights.

This outreach is to companies, not unsolicited email to sole traders or ordinary partnerships without an applicable permission. I identify myself, explain where I found the address in the first message, and provide a way to stop further messages. You have an absolute right to object to direct marketing. Opt out here or reply “no thanks”. No reason is needed.

Visitor statistics

I use Cloudflare Web Analytics to count visits to this website. Cloudflare says it does not use cookies or local storage for this and does not fingerprint visitors. I only see totals, such as which pages were viewed, which sites sent visitors here, rough country and device type. I cannot identify you from it. My legitimate interest is knowing whether the website is being found and used.

Who processes information

I use Cloudflare for hosting, security and visitor statistics, and Apple iCloud for email. Professional advisers and HMRC receive information where needed for advice or a legal obligation. I do not sell personal information.

Cloudflare and Apple may process information outside the UK, including in the European Economic Area and the United States. Cloudflare works under its Data Processing Addendum, which is part of my agreement with it. For UK personal information that addendum uses the European Commission's standard contractual clauses together with the UK Addendum issued by the ICO, and Cloudflare states that it complies with the UK Extension to the EU-U.S. Data Privacy Framework. Apple provides iCloud Mail under its own terms and privacy policy. Apple says personal data relating to people in the UK is controlled by Apple Distribution International Limited in Ireland, a country the UK treats as giving adequate protection, and that its transfers to other countries are governed by standard contractual clauses. You can ask me about these safeguards and for a copy where available.

Online form delivery is currently disabled. If enabled, Cloudflare Turnstile will process browser and network signals to prevent automated abuse, and Cloudflare's email service will carry your enquiry to my inbox. The form will say when it sends online. See Cloudflare's privacy policy. No advertising scripts are included. The only analytics script is Cloudflare Web Analytics, described above.

How long information is kept

  • Prospective company contacts not yet contacted: up to six months.
  • Enquiries that do not become work and unanswered outreach: up to 12 months after the last contact.
  • Client and accounting records: six years after the end of the tax year of the last invoice, unless a legal obligation or dispute requires longer.
  • Marketing objections: the minimum email address or matching identifier needed to prevent further contact, kept for as long as outreach continues. This suppression record is used only to respect your objection, under legal obligation and legitimate interests.

Cloudflare keeps its own network and security records for a limited time under its privacy policy; it does not publish one fixed period for these, so I can't state one here. Visitor statistics are shown to me as totals only.

Your rights

You can ask to access, correct or erase your information, restrict processing, object to processing based on legitimate interests, and ask for portability where it applies. Where processing relies on consent, you can withdraw it. Some rights depend on the lawful basis and circumstances. I do not make solely automated decisions with legal or similarly significant effects.

Email me to exercise your rights. I normally respond within one month; if a lawful extension is needed I'll explain why. You can object to marketing at any time and I will stop. You can also complain to the UK data protection regulator, the ICO.