Your data, accounted for.
Website enquiries and client portal data are stored in London. Below is every service that handles your information, what each one can see and how long we keep it.
What happens to an enquiry.
The journey your details take when you contact us through this website, step by step.
- You send an enquiryOver an encrypted connection, from your browser to Cloudflare.
- It is checkedCloudflare Turnstile confirms a person sent it, not a bot.
- It is passed onOur automation only accepts it with our secret key.
- It is stored in LondonIn our Supabase database, hosted in London.
- We replyWe are emailed the details and you get a confirmation.
Every service that handles your information.
They act only on our instructions and only as far as each one needs. Some are based outside the UK, including in the United States and the European Union.
Supabase
Stored in LondonOur database, file storage and client portal sign in. Our database is hosted in London.
Can seeWebsite enquiries, website chats and everything in the client portal
Cloudflare
Hosts this website and our client portal, checks forms for bots and counts visits without cookies.
Can seeTechnical details such as your IP address, plus what you send through our forms on its way to us
n8n
The automations that move information between our systems and send our emails.
Can seeThe information each automation passes on
Microsoft 365
Our email.
Can seeEmails you send us, the enquiry notifications we receive and a copy of a website chat when you leave your details
Brevo
Sends client portal sign in codes.
Can seeThe email address each code goes to
Anthropic (Claude)
Writes our website chat assistant’s replies, marks AI check answers, drafts emails, documents and monthly report summaries. It also helps build and maintain our website and portal.
Can seeWebsite chat messages and the text we ask it to work on
OpenAI, Perplexity and Google (Gemini)
Answer the questions in our free AI visibility check.
Can seeOnly a business name, town and service
Google
Calendar for call bookings and business listings for finding companies to contact.
Can seeThe details you enter when you book a call
Google Analytics
Shows us which pages people find useful, only if you allow analytics cookies.
Can seeThe pages you visit, how you arrived, your device and browser, plus a random ID in a cookie
Xero
Our invoicing and accounts.
Can seeInvoices and payment records
GitHub
Stores the code for this website and our client portal.
Can seeNo personal information
Wix
The platform for our previous website.
Can seeEnquiries sent through that website
Your device maker
Apple, Google, Microsoft or Mozilla deliver portal notifications, if you turn them on.
Can seeNothing readable: notifications are encrypted
The full detail is in our privacy policy and the client portal’s privacy notice.
AI helps us work. It does not make decisions about you.
- We check everything. We use Claude, made by Anthropic, to help draft emails, agreements and reports. We check everything before it is sent.
- Not used to train AI. Anthropic’s policy is that it does not train its models on inputs or outputs from its commercial products by default. Read Anthropic’s policy.
- The AI check shares the minimum. ChatGPT, Claude, Perplexity and Gemini receive only a business name, town and service, never your name or email address.
- No automated decisions. We never make decisions about you with legal or similarly significant effects by automated means alone.
Kept only as long as it is needed.
Shortest first, with each bar measured against the longest: six years for client records. Tips stop as soon as you unsubscribe.
Your information, your say.
You can ask for a copy of your information, ask us to correct it or delete it, limit how we use it, object to how we use it or have it sent to you or another organisation in a reusable format. You can always stop marketing emails.
Email [email protected] and we will respond within one month. If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office.
We are registered with the Information Commissioner’s Office, registration reference ZB861099.
Questions about your data
Is my data stored in the UK?
Website enquiries and client portal data are stored in our database in London. Some of the services we use are based outside the UK, including in the United States and the European Union, so some information is processed there. When it is, we rely on the protections UK law requires, such as UK adequacy regulations or the ICO’s international data transfer agreement or addendum.
Do you sell my information?
Never. We do not sell information or share it for anyone else’s marketing.
Is my information used to train AI?
We do not train AI models. We use Claude, made by Anthropic, to help with our work. Anthropic’s policy is that it does not train its models on inputs or outputs from its commercial products by default.
Can I get a copy of my information or have it deleted?
Yes. Email [email protected] and we will respond within one month. You can also ask us to correct it, limit how we use it or send it to you in a reusable format.
Are you insured if something goes wrong?
Yes. We hold cyber and data insurance plus professional indemnity and public liability insurance, with Hiscox through PolicyBee. Clients can ask for a copy of our certificate.
Are you registered with the ICO?
Yes. Proven Path Strategies Ltd is registered with the Information Commissioner’s Office, registration reference ZB861099. You can check our entry on the ICO’s public register.
See how we keep it secure.
How this website and our client portal are built, plus what we do if something goes wrong.