Privacy notice

Last updated 17 July 2026

This notice explains how Spaced Consulting handles personal data. Spaced Consulting is the trading name of David Hutton, a sole trader based in Bristol, United Kingdom, who is the data controller for the processing described here. You can contact me about anything in this notice at hello at spacedconsulting dot co dot uk.

Visiting this website

This site sets no analytics or marketing cookies and runs no tracking scripts. It is served by Cloudflare, whose infrastructure processes technical information such as IP addresses in server logs for security and delivery purposes. I do not receive or keep browsing profiles of visitors.

Enquiries and bookings

If you email me, use the contact form on this site or book a call, I hold your name, contact details and the content of your message in order to reply and to prepare for the conversation. Contact form messages are delivered to my mailbox by an email delivery provider acting under contract. The lawful basis is legitimate interests, or taking steps at your request before entering into a contract. Bookings are handled by Calendly, which processes the details you enter under its own privacy notice. I keep enquiry correspondence for up to two years after our last contact, then delete it unless we have started working together.

Business development contact

I sometimes contact people in their working roles at UK organisations to introduce Spaced Consulting's services. This section explains how that is done.

• What I hold: name, job title, work email address, and basic information about the organisation.
• Where it comes from: public sources only, such as Companies House, the organisation's own website and public business directories. I record the source of each contact's details and will tell you the source of yours on request. I do not buy marketing lists.
• Who I contact: corporate bodies only, such as limited companies and LLPs, in line with the Privacy and Electronic Communications Regulations. I do not send marketing to sole traders, ordinary partnerships or personal email addresses without consent.
• Lawful basis: legitimate interests, namely introducing relevant business services to people whose roles relate to them. A legitimate interests assessment is documented and available on request.
• Your choice: every message identifies me and includes a one-step way to opt out. If you opt out, I stop immediately. Your details go on a suppression list, kept permanently with the minimum information needed, so that you are never contacted again.
• Retention: if you do not respond and no business relationship develops, I delete your details within twelve months of collecting them.

Working together

If you become a client, I process the contact and business information needed to deliver the work, under the contract between us. Records needed for tax and accounting purposes are kept for six years in line with UK requirements, then deleted.

Who else touches the data

I use a small number of service providers to run the business: website hosting, DNS and spam protection on the contact form (Cloudflare, including Cloudflare Turnstile), email and contact form delivery, scheduling (Calendly) and, for business development, email verification services. They process data under contract and only as needed to provide their service. Where a provider processes data outside the UK, recognised safeguards such as adequacy regulations or standard contractual clauses apply.

Your rights

You have the right to access the personal data I hold about you, to have it corrected or deleted, to restrict how it is used, to receive a copy in a portable format, and to object to processing. Where data is used for direct marketing, your objection is absolute: one message is enough and it will be honoured immediately.

To exercise any right, email hello at spacedconsulting dot co dot uk. If you are unhappy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.