Privacy policy
In short: this site currently collects almost nothing about you. No accounts, no forms, no newsletter, no advertising trackers. Our host (Cloudflare) keeps standard server logs, and if you email us we hold your email to reply. When analytics are enabled at launch, we will say so here and use a consent mechanism where the law requires one.
Who is responsible for your data
The data controller for replacementhq.co.uk is Muswell Rose Consulting Ltd. Company number: 15269776. Registered address: 40 De Vere Road, Colchester, Essex, England, CO3 4EA. For anything privacy-related, email hello@replacementhq.co.uk.
What we collect today
The honest current state, kept deliberately minimal:
- Server logs. The site is hosted on Cloudflare. Like every web host, Cloudflare processes technical data when it serves you a page: IP address, browser and device information, and the pages requested. This is used for security (blocking attacks and abuse) and to make the site work. Lawful basis: legitimate interests in running a secure website.
- Email you send us. If you email hello@replacementhq.co.uk, we hold your email address and message for as long as needed to deal with it. Lawful basis: legitimate interests in answering the people who write to us.
- "Report an error" form. If you use the form on the corrections page, we store the page you name, what you say is wrong, an optional source link, an optional email address if you want a reply, and the time. We use it to check and fix the error and, if you gave an email, to reply to you. Lawful basis: legitimate interests in keeping the site accurate. We keep reports while they are open and for as long as the correction log needs them, then clear them out.
- "Not covered yet" box. If you use the box on the home page, we store what you type, the page you sent it from and the time. Please do not include personal details. We use it to decide what to cover next. No account is needed and nothing else is collected.
That is the complete list. There are no accounts, no newsletter sign-up, no comments and no advertising trackers on this site.
Analytics at launch
When enabled (they are not yet), we will use two analytics tools to understand how the site is used:
- Google Analytics 4 collects pseudonymous usage data: pages visited, approximate location derived from IP (the IP itself is not logged by GA4), device and browser type, and how you arrived at the site. We will use it to see which guides are useful.
- Microsoft Clarity collects anonymised interaction data: scrolling, clicks and session recordings with sensitive content masked. We will use it to find pages that confuse people.
Lawful basis: our legitimate interest in understanding and improving the site, and, because both tools set cookies, your consent where PECR requires it. A cookie banner with equal Accept and Reject buttons will accompany analytics when they are enabled; your choice is kept in your browser's local storage as cookie_consent, and our cookie policy lists the exact cookies. Analytics data will be retained for the shortest practical period (we intend to set GA4 retention to 14 months).
Who we share data with
We do not sell or rent personal data to anyone. Data is processed by our service providers only: Cloudflare (hosting and email routing) and Supabase (database that stores the two forms above) today, plus Google and Microsoft if analytics are enabled. Some of these providers process data outside the UK; where they do, transfers rely on UK adequacy decisions or approved safeguards such as the UK International Data Transfer Addendum.
How long we keep things
- Server logs: kept by Cloudflare for short, rolling periods under its own policies.
- Email correspondence: kept while we deal with it, then periodically cleared out.
- Analytics (when enabled): per the retention settings above.
Your rights
Under UK GDPR and the Data Protection Act 2018 you have the right to:
- access a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to our processing, including any based on legitimate interests
- data portability, where processing is based on consent
- withdraw consent at any time, where consent is the basis (for example analytics cookies)
To exercise any of these, email hello@replacementhq.co.uk. Given how little we collect, the honest answer to most requests will be that we hold nothing about you beyond any email you sent us.
Complaints
If you are unhappy with how we handle your data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this page when our data practices change, most obviously when analytics are switched on, and the date below will change with it.
Last updated 2026-07-15.