Legal

Privacy Policy

How Shadow Computers collects, uses, and protects your personal data.

Last updated: 2 May 2026

This policy explains how Shadow Computers collects and handles personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Shadow Computers is a trading name of Steve Roberts, a sole trader based in the United Kingdom. Steve Roberts is the data controller for all personal data processed through this website.

Trading name
Shadow Computers
Data controller
Steve Roberts
Contact
privacy@shadowcomputers.uk or via the contact form
Website
shadowcomputers.uk

As a small, sole-trader business, Shadow Computers is not required to appoint a Data Protection Officer (DPO). Any data-related enquiries should be directed to Steve Roberts using the contact details above.

2. Data we collect

We only collect personal data that you provide directly or that is generated automatically when you visit this website.

Information you provide

When you use the contact form, we collect:

  • Your name
  • Your email address
  • The subject of your enquiry
  • The content of your message

Information collected automatically

Our hosting provider (Netlify) automatically collects standard server log data when you visit this website. This may include:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL
  • Pages visited and timestamps

This data is processed by Netlify on our behalf. We do not have direct access to individual server log entries in normal operation.

3. How we use your data

We use the personal data we collect solely to:

  • Respond to your enquiry or request submitted via the contact form
  • Maintain the security and performance of this website
  • Investigate and resolve any technical issues

We do not use your data for marketing, profiling, or automated decision-making. We do not sell, rent, or trade your personal data with any third party for their own purposes.

Under UK GDPR Article 6, we rely on the following lawful bases:

Contact form submissions
Legitimate interests (Article 6(1)(f)) — to respond to your enquiry. Our legitimate interest is communicating with people who have chosen to contact us. This processing does not override your rights or freedoms.
Server and access logs
Legitimate interests (Article 6(1)(f)) — to maintain the security, availability, and performance of this website.
Google Analytics
Consent (Article 6(1)(a)) — Google Analytics only loads after you accept analytics cookies via the cookie banner. You may withdraw consent at any time by adjusting your cookie preferences.
Cloudflare Web Analytics
Legitimate interests (Article 6(1)(f)) — Cloudflare Web Analytics is cookieless and processes only aggregated, anonymised data. As no personal data is stored or tracked, no consent is required under PECR or UK GDPR.

5. How long we keep data

Contact form messages
Retained for as long as is reasonably necessary to resolve your enquiry and for a short period afterwards in case of follow-up, typically no longer than 12 months. Email correspondence may be retained longer where there is an ongoing business relationship.
Server logs
Retained by Netlify in accordance with their data retention policies, typically for up to 30 days. See Netlify's Privacy Policy ↗ for details.

6. Third parties and processors

We use the following third-party services that may process personal data on our behalf or as independent controllers.

Netlify

This website is hosted by Netlify, Inc. Netlify processes server logs and handles contact form submissions on our behalf. Netlify acts as a data processor for form data and as an independent controller for service-level data.

Netlify Privacy Policy ↗

Google Analytics

We use Google Analytics 4 to understand how visitors use this website. Google Analytics collects data such as pages visited, time spent on site, referring sources, and approximate geographic location. It does this using cookies stored in your browser. IP anonymisation is enabled; your full IP address is never stored.

Google Analytics only loads after you have given your consent via the cookie banner. You may withdraw consent at any time.

Google Privacy Policy ↗  ·  Google Analytics Opt-out ↗

Cloudflare Web Analytics

We use Cloudflare Web Analytics to measure site traffic. Cloudflare Web Analytics is cookieless — it does not store any information in your browser and does not track you across sites. It processes aggregated, anonymised data only and does not create individual visitor profiles.

Cloudflare Privacy Policy ↗

Google Fonts

This website loads fonts from the Google Fonts API (fonts.googleapis.com). When your browser requests a font file, Google may log the request including your IP address. Google states that it does not use this data to build user profiles or serve advertising.

Google Fonts Privacy FAQ ↗

7. International transfers

Some of the third-party services listed above are based outside the United Kingdom and may transfer or process your data internationally.

Netlify
Netlify is headquartered in the United States. They rely on standard contractual clauses approved by the UK ICO (or equivalent international transfer mechanisms) to legitimise transfers. See Netlify's privacy policy for current transfer mechanisms.
Google Analytics & Google Fonts
Google LLC is based in the United States. Google relies on standard contractual clauses and other mechanisms for international data transfers from the UK.
Cloudflare
Cloudflare, Inc. is based in the United States. Cloudflare Web Analytics processes only aggregated, anonymised data and relies on standard contractual clauses for any UK data transfers.

8. Your rights

Under UK GDPR, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us using the details in section 11.

Right of access
You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification
You have the right to ask us to correct any personal data we hold about you that is inaccurate or incomplete.
Right to erasure
You have the right to ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing
You have the right to ask us to pause processing of your personal data in certain circumstances, for example while we verify its accuracy.
Right to data portability
Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to object
You have the right to object to processing carried out on the basis of legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Rights related to automated decision-making
We do not carry out any automated decision-making or profiling. This right is therefore not applicable at present.

We will respond to any request within one calendar month as required by UK GDPR. There is no charge for making a request.

9. Cookies

Cookies are small text files placed on your device by your browser. We use them only as described below.

Analytics cookies (optional — requires consent)

If you accept analytics cookies, Google Analytics will set cookies in your browser (including _ga and _ga_*) to distinguish visitors and track usage over time. These cookies are active for up to 2 years. You can prevent them by declining the cookie banner, or remove them at any time through your browser settings or the Google Analytics opt-out browser add-on ↗.

Cookieless analytics (no consent required)

Cloudflare Web Analytics does not use cookies or any browser storage. It measures traffic using a JavaScript beacon that sends aggregated, anonymised data only. No personal data is stored on your device and no consent is required.

Technically necessary

Your browser may cache font files from Google Fonts and other static assets as part of normal browsing. These are not cookies and do not transmit personal data back to us or any third party.

If Netlify sets any functional cookies required for form submission or site operation, these are covered by the Netlify Privacy Policy ↗.

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated "last updated" date at the top. Where changes are material, we will take reasonable steps to bring them to your attention. Continued use of this website after any changes constitutes acceptance of the updated policy.

11. Contact and complaints

Contact us

To exercise any of your rights, ask a question about this policy, or raise a concern about how we handle your data, please contact Steve Roberts at privacy@shadowcomputers.uk or via the contact page.

We will acknowledge your request promptly and respond in full within one calendar month.

Right to complain

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Authority
Information Commissioner's Office (ICO)
Website
ico.org.uk ↗
Helpline
0303 123 1113

We would always prefer the opportunity to address your concern directly before you contact the ICO, but you are entitled to contact them at any time.