Privacy

Last updated: 26 September 2026

Who I am

Salloway is a trading name of Aurelia Technology Consulting Limited, a company registered in England and Wales (company number 14957218). Its registered office is Collingwood Buildings, Collingwood Street, Newcastle upon Tyne NE1 1JF.

The company is the "controller" of your personal data. That means it decides how your data is used and is responsible for looking after it. It is registered with the Information Commissioner's Office (ICO), registration number ZB667041.

Salloway is run by me, Nick Salloway. In this policy, "I", "me" and "my" mean the company. If you have any question about your data, email me at privacy at salloway dot consulting.

The same company also runs Sail, a club management platform. This policy covers Salloway only. Sail has its own privacy policy at sailapp.cloud/legal/privacy.

What I collect, why, and for how long

When you visit this website

Server logs. The site is hosted by Netlify. Like any web host, Netlify records technical details of each visit (your IP address, browser type and the pages requested) for a short time to keep the site running and secure. I rely on legitimate interests: running a website that works and isn't abused.

Analytics, only if you agree. If you click Accept on the cookie banner, I use Google Analytics to see which pages people read and how they found the site. It records the pages you view, the site you came from, your device and browser type, and your approximate location (town or region). Google Analytics does not store your IP address. I have switched off Google Signals and all advertising features, so this data isn't used to show you adverts. Google keeps the detailed record of your visits for two months and then deletes it. After that, I can only see totals, such as how many people read each page, which can't be traced back to you. My lawful basis is your consent, and you can change your mind at any time using the Cookie settings link at the bottom of every page.

When you get in touch

If you use the contact form or email me, I receive your name, your role at the club, the club's name, your email address and whatever you tell me. I use it to reply, and if your club goes on to work with me, it becomes part of the records described below. The form is handled by Netlify and arrives in my email.

My lawful basis is legitimate interests: replying to people who contact me about their club. If nothing comes of it, I delete your details two years after we were last in touch.

When you book a call

Bookings are made through Calendly, which collects your name, email address, the time you choose and anything you type in the booking form. Calendly sends the invitation and a reminder. Calls take place on Google Meet.

My lawful basis is legitimate interests: arranging a call you have asked for. I keep booking details for the same period as other enquiries.

When your club works with me

I hold the names, roles and contact details of the people I work with at your club (usually the commodore, secretary, treasurer and whoever does the digital work), what we discuss in sessions and by email, your answers to the Digital Review questionnaire (which may name the volunteers who look after each system), and the documents I write for the club. I also keep invoices and payment records. Payments are taken by Stripe; I never see or store card or bank details.

My contract is with the club, not with you personally, so my lawful basis for your details is legitimate interests: delivering the service your club has asked for. For invoices and payment records it is legal obligation, because the company must keep tax and accounting records.

I keep these records while your club works with me and for six years after, because that is how long a claim under a contract can be brought and how long HMRC expects records to be kept.

Recording sessions. I don't record a session unless everyone on the call agrees at the start. If you agree, I use Fireflies to produce a transcript for my notes. I delete the recording within 30 days and keep only the notes, as part of the club's records.

Case studies. If your club agrees to a case study, I will only publish your name, words or photo with your agreement. You can ask me to take them down at any time.

Your club's members

I don't need your members' personal data to do my job, and my terms ask clubs not to send it to me. If I see some in passing, for example on a shared screen, I won't copy, record or keep it. If a project ever needs me to handle member data, we will sign a separate data processing agreement before it starts.

If I contact your club first

I sometimes contact clubs I haven't worked with, using contact details the club publishes, for example on its website. I hold your name, role, club and the published contact details. My lawful basis is legitimate interests: telling clubs about a service that is relevant to them. My first message will say where I found your details, and I will stop if you ask. I only send marketing emails where the law allows it.

I keep these details for two years from our last contact. If you ask me to stop, I keep just enough to make sure I don't contact you again.

Blog updates

If you sign up for blog updates or a download, I keep your name and email address and send you new posts. My lawful basis is your consent. Every email has an unsubscribe link, and I delete your details when you unsubscribe.

Decisions made automatically

None. I don't use your data for automated decisions or profiling.

Cookies

Cookies are small files a website stores on your device. This site uses as few as possible.

The booking calendar on this site is provided by Calendly. It only loads when you choose to book, by clicking "Book a call" or "Show booking calendar", and Calendly then sets its own cookies so the booking works. Calendly's privacy notice, on calendly.com, explains them.

You can change your choice at any time with the Cookie settings link at the bottom of every page, or clear cookies in your browser.

Who else sees your data

I use a small number of suppliers to run the business. They handle data on my instructions, under contracts that require them to keep it safe:

• Netlify: website hosting and the contact form
• Google: website analytics (only if you agree)
• Calendly: call bookings
• Microsoft 365: email, calendar and documents
• Google Meet: video calls
• Fireflies: transcribing calls (only if everyone agrees)
• Stripe: taking payments
• Xero and my accountant: the company's accounts

I will also share data if the law requires it (for example with HMRC), or if the business is ever sold, in which case I would tell you.

I don't sell personal data.

Sail is run by the same company as Salloway. I won't use your details to tell you about Sail unless you've said you'd like to hear about it. You can change your mind at any time by emailing me.

Data outside the UK

Several of these suppliers are based in the United States or may store data there. Those transfers are protected either by the UK-US data bridge (for companies certified under it) or by the UK's standard contract terms for international transfers.

I work from the UK and Italy. The UK recognises data protection in the EU as adequate, so your data is protected to the same standard in Italy.

Keeping it safe

Only I have access to your data. Every account I use has two-factor authentication, my devices are encrypted, and I delete data when the periods above run out.

Your rights

You have the right to:

• ask for a copy of the data I hold about you
• ask me to correct anything that is wrong
• ask me to delete your data
• ask me to stop or limit how I use it
• object to my using it on the basis of legitimate interests
• ask for your data in a form you can take elsewhere
• withdraw your consent, where I rely on it, at any time

Email privacy at salloway dot consulting. There is no charge. I will reply within one month, and I may need to confirm who you are first.

Complaints

If you're unhappy with how I've handled your data, please tell me first at privacy at salloway dot consulting. I will acknowledge your complaint within 30 days, look into it, and tell you what I've done.

If you're still unhappy, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If I change this policy, I'll update the date at the top. If a change affects clubs I'm working with, I'll tell them by email.