LAST UPDATED 29 OCTOBER 2026
Privacy, plainly.
This notice explains how Graft & Click handles enquiries through this website.
Who handles your enquiry
Graft & Click is the website service presented on this site, operated by Sean Pumphrey. You can contact us at hello@graftandclick.co.uk or using the enquiry form. To raise a privacy request, write “Privacy request” in your message and include the email address used for your original enquiry.
What we collect
The form asks for your name, business name, trade, area, email address, optional telephone number and website, and your message. It also records a submission reference, time and acknowledgement of this notice. Please do not include passwords, payment details or sensitive personal information.
What we use it for
We use these details to review your website requirements, reply to your enquiry and prepare a proposal if appropriate. This processing supports steps you ask us to take before a potential service contract. Enquiring does not subscribe you to marketing. We may retain relevant correspondence while discussing or delivering services.
Storage and service providers
Enquiries are saved in a private database associated with this website. Email correspondence is handled through our IONOS business mailbox. If email notifications are enabled, Resend processes the enquiry details to deliver a notification to that mailbox. An email delivery failure does not delete the saved enquiry. The site uses ChatGPT Sites and Cloudflare hosting infrastructure. Authorised account access is required to review saved enquiries; no public enquiry list or customer dashboard is exposed. Hosting providers may process connection and technical information to deliver and protect the website. Their infrastructure may involve processing outside the UK under their applicable data-protection arrangements.
Security and spam prevention
The website uses HTTPS, input checks, a hidden spam field and basic submission limits. A daily hash derived from the connection’s IP address is stored with the enquiry to help limit abuse; this application does not store the raw IP address in its enquiry database. These checks support our legitimate interest in keeping the service secure.
How long we keep information
We keep enquiry information while it is needed to answer you, discuss a proposal or maintain relevant business records. Unneeded enquiries are reviewed for deletion. If you do not proceed and would like your enquiry deleted, use the contact form to request this. Where information is required for a client contract or legal record, it may need to be kept longer.
Your choices
You can ask to access or correct your information, or request deletion, restriction, portability or object to processing where applicable. We may need to verify the request before disclosing or changing a record. You can also raise concerns with the UK Information Commissioner’s Office at ico.org.uk.
Cookies and analytics
We count page loads by date and page address to understand which pages are used. These counters do not store visitor identifiers, IP addresses, referrers, query strings or browser details. They count page loads, not unique people, and may include automated traffic. We compare those totals with saved enquiry counts to assess the website. We have not added advertising trackers or analytics cookies. The enquiry form does not save its contents in browser storage. The hosting platform may use essential security or authentication mechanisms. Links to WhatsApp, provider services or other websites are subject to those services’ own privacy arrangements.
Examples on this website
Northbank is a fictional demonstration business. Its form only previews a message in the browser and does not send or save enquiries. Bathroom images are illustrative and are not presented as completed client work.