Privacy Policy

Pro-Create · Updated 11 November 2026

This notice explains how Pro-Create handles website visits, enquiries and business contact information. Visiting this website or making an enquiry does not subscribe you to marketing. Business prospect research and the separate outbound outreach arrangements are explained in section 9.

1. Who is responsible for your information?

Pro-Create is operated by Rob Pountney trading as Pro-Create, a sole trader and the data controller responsible for your personal information.

Business correspondence address:

Website: https://pro-create.com

For business enquiries, privacy questions or to exercise your rights, email [email protected] or write to the correspondence address above. You can also use the enquiry form; choose “Not sure yet” and write “Privacy request” in the project details.

2. Information provided through enquiries

We receive information directly from you when you use the enquiry form or email us.

• Required form details: your name, email address, website package choice (including “Not sure yet”) and preferred start time.
• Optional form details: your telephone number, business or project description, hosting or maintenance interests and any additional support you select.
• Form context: a source label identifying the Pro-Create enquiry form and the package price shown when you submit.
• Direct emails: your email address, message, any name, signature, attachments or other information you choose to include, and correspondence needed to deal with your request.

The name and email fields and the two choices are required to submit the form, but there is no statutory obligation to use it. Without contact details we cannot reply. Please do not include sensitive information, passwords or payment card details.

We use enquiry information to respond, discuss your requirements, prepare a proposal and, if you proceed, manage your project. Submitting the form or emailing us does not subscribe you to outreach or add you to a marketing list.

3. Why we use website and enquiry information

When you ask about buying a service for yourself, the lawful basis is taking steps at your request before entering into a contract. When you become a client, information necessary to deliver the agreed service is processed to perform that contract.

For enquiries made on behalf of a company, the relevant legitimate interest is answering the company’s request and managing the business relationship. Technical connection information is processed for the legitimate interests of delivering, maintaining and protecting the website. These purposes do not make an enquiry a marketing subscription.

Where a specific legal record-keeping or disclosure obligation applies, the relevant information may be processed to meet that obligation. This is not a claim that every enquiry must be kept for a fixed statutory period.

4. Website and email providers

• Formspree: your browser sends the enquiry form directly to Formspree, which processes submissions and routes enquiries to a separate business inbox. The website’s contact APIs and database do not receive or store these form submissions. Formspree may also hold submission copies and technical information under its privacy policy.
• Email: Formspree enquiries go to the separate business enquiry inbox. IONOS hosts [email protected] for direct email and business correspondence. The provider of the separate enquiry inbox and its account-specific storage arrangements are still to be confirmed; it is not assumed to be the IONOS mailbox.
• Replit and delivery infrastructure: Replit hosts this website. The published site is served through infrastructure including Google and Cloudflare. These services receive connection information such as IP addresses, requested URLs, browser information and request times to deliver and protect the site. The published site also loads a Cloudflare performance and analytics beacon, described below.
• Google Fonts: your browser requests font styles and files from Google. Google receives the IP address, requested resource and browser request headers, which can include the referring page. Google states that the Fonts API does not set or log cookies or use its data for targeted advertising. See Google Fonts privacy information.

Website enquiries are not sent to Brevo or added to a marketing list. Information may also be disclosed where a specific legal requirement applies.

5. Overseas processing

Using these services can involve processing outside the UK. Formspree’s published privacy policy describes processing in the United States and other countries where it operates. Replit publishes a data processing agreement containing international transfer terms, including standard contractual clauses and UK transfer provisions where applicable. This describes the published terms, not a claim that every account-specific transfer arrangement has been verified.

The applicable UK transfer arrangement for Formspree and the separate enquiry inbox still needs account-level confirmation. No particular safeguard or UK-only storage is assumed for those services. Contact [email protected] for information about overseas processing and any applicable safeguards.

6. Retention and security

The relevant criteria for keeping enquiry correspondence are whether it is needed to answer an open request, prepare a proposal, deliver or support an agreed project, or deal with a specific legal obligation, complaint or dispute. Only records relevant to that purpose should be retained; an enquiry does not justify keeping all associated information indefinitely.

There is no verified fixed or automatic deletion schedule for website enquiries, provider-held copies, technical logs or backups. Their actual storage and recovery settings depend on the services used. You can ask what information is held about you and request deletion using the contact details above. A request may be subject to a specific legal exception.

The website and its Formspree submission endpoint use HTTPS. The current form bypasses the website’s contact APIs and database. The retired legacy contact and intake endpoints return HTTP 410 with an explicit non-delivery response before parsing or logging submissions. Hosting and provider logs may separately hold technical connection information; retiring the endpoints does not erase historical logs. No claim is made that unverified mailbox, device or backup controls are in place.

7. Cookies, fonts and site performance

The application does not add advertising pixels or code that writes cookies, local storage or session storage on the homepage, enquiry page or this notice. This does not mean the hosting infrastructure sets no cookies.

The published site sets a cookie named GAESA, observed with an expiry of approximately 30 days. Replit’s hosting documentation identifies it as a serving-infrastructure routing cookie. Its expiry is not a retention period for enquiry information.

The published site also loads a Cloudflare performance and analytics beacon. Cloudflare describes its Web Analytics as using no cookies or local storage and no fingerprinting for analytics. Loading and using the service still involves network connections to Cloudflare; it is not a statement that the site makes no third-party requests.

Google Fonts requests occur when pages load. Formspree receives the form contents when you submit an enquiry. Provider websites reached through links have their own privacy and cookie information.

8. Your rights and complaints

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of processing or portability, and object to processing based on legitimate interests. You can withdraw consent at any time where processing relies on it. Some rights have legal conditions or exceptions; the right to object to direct marketing is absolute.

Use the contact routes above. Reasonable identity checks may be needed. Requests are normally answered within one month, with an extension in permitted cases and an explanation if one is needed.

The website form does not make automated decisions about you with legal or similarly significant effects.

You can raise a concern by emailing [email protected] or writing to the correspondence address above. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

9. Business prospect research and outreach

We research UK businesses using publicly available information, including business websites, directories and Companies House. We may record business names, websites, published business contact details, company registration information, relevant website observations and our communication history.

We use this information to identify businesses that may benefit from our website services. Our lawful basis for processing relevant personal data is legitimate interests, supported by a legitimate interests assessment.

Our unsolicited email outreach is restricted to eligible corporate subscribers. We do not send unsolicited marketing emails to sole traders or other individual subscribers without an applicable lawful permission.

We use Brevo to send emails and monitor delivery, bounces and complaints. Our current outreach emails are plain text and do not use open or click tracking.

Replies are received through IONOS and may be forwarded to the Grok Bot service for managing correspondence, prospect records and opt-out requests. Grok Bot processes prospect information in the United States. Brevo and IONOS also process information as part of providing their services.

Inactive prospect records are subject to a 12-month retention and deletion process, measured from the last meaningful contact or verification, subject to appropriate exceptions and the retention arrangements of relevant providers.

If you ask us not to contact you, we retain minimal suppression information for as long as necessary to honour that request.

You can object to direct marketing at any time by replying to our emails or contacting [email protected]. We will stop sending you marketing emails and no explanation is required.

This notice will be updated when relevant processing changes. Publication of the website and activation of outbound outreach are separate decisions.