Finch+Finch Ltd is the data controller. Last updated 8 October 2026.
Measurement
We count page views and a small number of deliberate actions: which audience route was taken from the home page, whether a resource was requested, whether the contact address was used. We use Umami, a privacy-focused analytics service, which processes these counts on our behalf. Nothing is sent to an advertising network, and nothing we collect is sold, shared or used to target you.
This measurement sets no cookies, stores no IP addresses and creates no profile of you. Because nothing is stored on or read from your device, no consent is required and there is nothing here for you to accept or reject. The one thing we do store on your device is a note that you have dismissed the notice at the foot of the page, so that it does not reappear.
We do count whether a visit is a first one or a return, because we would rather write things worth coming back to than things that are merely clicked. That is worked out from a one-way fingerprint of your network address and browser, which is discarded as soon as it has been calculated and cannot be turned back into either. It is not exact, and it is not meant to be: it tells us a page was read twice, not who read it.
We also keep a short server-side record of key actions, including downloads, which route through the site it was requested from, and whether the download then succeeded. That record contains no name, address or network address, and the same counts are passed to Umami on the same terms as the rest of our measurement. The one exception is the download register described under When you download a tool, which is a separate record and is named on purpose.
When you contact us
If you email us we receive your address, your message and whatever else you choose to tell us. If you use a form on this site we receive your name, email address, any organisation you give and your message. We use these to reply to you and to keep a record of the enquiry. We do not use them for anything else and we do not pass them to anyone.
When you download a tool
Some of our resources are released through a short form asking for your name, your organisation and your email address. This information is kept securely as a register of who has downloaded which tool, in which version and when.
Each request is given a random reference code, which is recorded in the register, carried in your download link and in the measurement above, and written into the workbook you download. That lets us tell whether a download went through or the link expired, and which copy of a tool someone is asking about. The code is not derived from anything about you, and it means nothing outside our own register.
If you follow the download link inside one of our workbooks to get a newer version, the workbook passes its own reference code with it, so the register can record which copy was updated. Workbooks do not send it at any other time, including when they check whether an update is available.
How long we keep it
Enquiries are kept for as long as there is a live conversation and for two years after it ends, so that we have a record of what was discussed. Download register entries are kept for as long as the version you downloaded is plausibly still in use, and reviewed yearly. Mailing list addresses are kept until you ask us to remove them. Analytics data is retained in aggregate.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email ku.oc.hcnifdnahcnif@olleh and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner’s Office at ico.org.uk.
Other sites
The analytics script described above is the only thing this site loads from anywhere other than our own server. There are no third-party fonts, embeds, advertising tags or social widgets, and no other company receives anything when you visit. Links to other sites are ordinary links, and those sites have their own privacy practices.