Privacy & business information.

Privacy at a glance

Who runs this site? I’m David Rogerson, trading as Business Made Manageable.

What happens to your enquiry? The form prepares an email draft in your browser. I receive your details only when you send it. I use them to respond and don’t add you to a marketing list.

Questions about your data? Email me or read about your privacy rights.

Who is responsible?

David Rogerson, trading as Business Made Manageable, is a UK sole trader and the controller of personal information used to manage enquiries and business relationships.

Email: [email protected]
Business postal address: 19 Merryfield Close, Bransgore, BH23 8BS, United Kingdom.

My service prices do not include added VAT because I am not currently VAT registered. No company registration number is claimed. An ICO fee self-assessment for the current activities has indicated an exemption from paying the data protection fee. This is not ICO approval or certification, and the assessment will be reviewed if the business’s activities change.

What information do I use, and why?

I receive information you choose to give me directly. Please only provide what is needed for your enquiry. Do not send passwords, card details, sensitive personal information or your customers’ records through this website.

Providing enquiry details is voluntary, but I may be unable to respond or prepare a useful proposal without enough information. There is no automated decision-making or profiling that produces legal or similarly significant effects.

What happens when you use the contact form?

The form builds an email draft in your browser. Pressing Prepare enquiry draft does not send it to me or submit it to a website database. You must send it through your own email app or copy and email it yourself. Your email provider may save a draft under its own settings.

Once you send an email, I receive and handle the message in my Microsoft Outlook.com inbox. Enquiries are handled by email at launch. I do not send promotional emails or add enquiry or client contacts to a marketing mailing list. Necessary replies, proposals and agreed service messages are not a marketing subscription.

Who may receive information?

• Microsoft Outlook.com: email delivery, mailbox storage and security under the Outlook.com consumer service terms and Microsoft privacy statement.
• Microsoft OneDrive for Business: the selected storage service for client proposals, invoices and project files when engagements begin. Synced copies may also be stored on devices used for the work.
• Cloudflare Pages: hosting and delivering this website. Cloudflare processes technical request information, such as IP addresses and browser details, to deliver the pages and protect the site.
• Google Fonts: this site currently requests fonts from Google. Those requests disclose technical information, such as your IP address and browser details, to Google.
• Professional advisers, authorities or insurers: only where needed for an engagement, a legal duty or a dispute. These are potential recipients, not automatic recipients of every enquiry.

I do not sell enquiry information. No payment processor, live booking provider or invoicing integration is connected to these demonstrations. Providers may act under their own privacy notices as well as any applicable processing terms.

Read the Microsoft privacy statement, Cloudflare privacy policy and Google Fonts privacy information.

Account security

Two-factor authentication is enabled on the Microsoft OneDrive for Business account used for project files. I will check file-sharing permissions and recovery settings before using the account for live client files.

Processing outside the UK

Information may be processed outside the UK. Cloudflare describes applicable processing and international-transfer safeguards, including provisions for restricted UK transfers, in its Data Processing Addendum. You can contact me to ask about the safeguards that apply.

Microsoft explains international processing and safeguards for its consumer services in its privacy statement. For eligible Microsoft business subscriptions, the Microsoft Products and Services Data Protection Addendum sets out the applicable processing and transfer terms. OneDrive storage at rest depends on the Microsoft 365 tenant and subscription. This notice does not promise UK-only storage or processing.

Google explains the transfer safeguards for its services in its data transfer frameworks. To ask about a provider’s safeguards or request a copy where applicable, email me using the address above.

Cookies and browser storage

The website code does not include advertising pixels or marketing analytics. Hosting and security services may use essential cookies or related technologies. No visitor account or sign-in is required. Third-party links are governed by the destination’s own policies. Any future non-exempt tracking would need appropriate information and consent before activation.

The TradeFlow demonstrations

Use fictional details only. Demo bookings are stored in this browser using local storage, separately for each example business. They are not sent to me or synchronised to another device. The site stores the details entered, the selected service and time, booking status and reminder preference. A saved preference does not schedule a real reminder.

The demo uses keys beginning tradeflow-demo-v2: and may migrate the older tradeflow-sales-demo-v1 key. Stored data remains until reset, cleared through your browser settings or removed by the browser. People sharing this browser may be able to see it; business separation in the demo is not a secure account system.

Use Reset this business in the demo diary to clear one example’s records, or clear all TradeFlow demo records here. The bespoke enquiry preview stays in page memory and is cleared when you reload or change business.

How long is information kept?

Information is kept only while needed for an active enquiry or client relationship, followed by the periods below. Unnecessary information may be deleted earlier.

• Enquiries that do not become a client: delete within 14 months of the last meaningful contact, unless an active discussion or a necessary legal hold requires continued use.
• Routine client records and working files: delete within 14 months after the record ceases to be needed in live use for a current client. This normally follows the end of the engagement, including any agreed ongoing service, and completion of outstanding support or handover. A record is not kept active simply because it is occasionally opened or reviewed.
• Tax and accounting records: the 14-month routine-record limit does not override statutory requirements. Sole-trader records supporting tax returns are normally kept for at least five years after the 31 January filing deadline for the relevant tax year, or longer where HMRC rules or an unresolved enquiry require it.
• Complaints, disputes or other legal obligations: retain only the information needed for the particular issue while that reason applies. It is reviewed and removed when no longer necessary; an entire client file is not automatically kept for longer.
• Demo records: kept only in your browser until cleared, as explained above.
• Provider logs, recycle bins and backups: removal from working accounts is managed to the schedule above. Final removal of provider-held copies can follow the provider’s deletion cycle and legal obligations. Microsoft says Outlook.com items can remain recoverable or retained after deletion. OneDrive for Business ordinarily keeps deleted files recoverable for up to 93 days unless the administrator changes the setting. These recovery windows are separate from my 14-month working-record policy. Website technical logs are subject to the host’s own service retention arrangements.

This is a retention policy, not an automated deletion service. Records need regular review, including email, OneDrive for Business files, synced copies and deleted-item folders.

Your data protection rights

Depending on the circumstances, you can ask for access to your information, correction, deletion, restriction or a portable copy. You can object to processing based on legitimate interests. If consent is used for a future optional service, you can withdraw it at any time without affecting earlier lawful processing. You can always object to direct marketing.

Email [email protected] to make a request. I may need proportionate identity checks. Requests are normally free and answered within one month; lawful extensions or exceptions may apply and will be explained.

Some information may need to be kept for legal obligations or claims, so deletion is not an absolute right. This website is intended for business enquiries, not children’s services.

Questions or complaints

You can make a data protection complaint directly to David at [email protected]. Please explain your concern and preferred reply method. Complaints will be acknowledged within 30 days, investigated without undue delay, and you will be kept informed and told the outcome.

You may also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Telephone: 0303 123 1113. You do not have to give up that right by contacting me first.

What about your customers’ information?

This notice covers Business Made Manageable’s own enquiries and business administration. A live client booking or customer-management service needs its own assessment: the client will usually control their customers’ data and I may act as a processor under written instructions. Provider checks, appropriate processing contracts, access controls, retention and customer-facing notices must be agreed before real customer records are used.

This notice is not a substitute for a client’s privacy notice, a processing agreement or service terms. Any material change to this website’s data use will be reflected here and communicated where required.