Privacy.
The short version: this site runs on infrastructure I control. No ad networks, no fingerprinting, no cross-site tracking, no advertising cookies. If you say yes to the measurement prompt, I also record how the site gets used, anonymously. If you send an enquiry I use it to reply to you, and that's it. Nothing is ever sold or shared for marketing.
Who I am
.bnito is John Bennett, a sole trader in Lincoln, UK. I'm the data controller for anything collected on this site. You can reach me at john@bnito.co.uk.
What I collect, and why
If you send an enquiry: your name, email address, your message, any project details you choose to add (company, phone, project type, budget, deadline), which button brought you to the form, if you came from a link I emailed you, the reference code in that link, and any campaign tags in the link you arrived on, plus which ad network sent you if you clicked an ad (the network's click ID itself is not kept, except in the backup copy described below), the page you sent it from, the site that referred you, and your browser's language and time zone. The system also notes the country you sent it from, which Amazon Web Services work out from your connection; your IP address is not kept. I use this to reply to you and for no other purpose.
Only if you say yes to measurement: which pages and sections you view, which buttons and links you click, how far you scroll, how much of a video you watch, whether you started or sent the enquiry form, your device type and screen size, the site that referred you, any campaign tags in the link you arrived on, and, if you came from a link I emailed you, the reference code in that link, which tells me which email it was. A random session ID, with the reference code, campaign tags and ad network from the link you arrived on, is kept in your browser until you close the tab. No cookies, and no IP address or browser details are stored with it. Your yes or no is remembered in your browser, so you aren't asked again. You can at any time.
The legal basis for handling enquiries is legitimate interest: replying to people who contact me and keeping spam out. Measurement only happens with your consent, and stops when you withdraw it.
If you use the chat: the chat in the corner is answered by an AI model (Claude, made by Anthropic) that only knows this site's public pages. What you type is sent to Anthropic to get an answer, and it is only kept if you send it to me: pressing “Send to John” sends your name, email address, your note and the conversation by the same route as an enquiry, and it is then kept the same way. Close the chat without sending and nothing is stored. To stop abuse, the chat counts messages from each connection for ten minutes, in memory only; that count is never stored.
Where it goes
- Amazon Web Services store enquiries in a private storage bucket in Stockholm, in the EU, that only I can access. Not a third-party CRM, not a marketing platform. A private database there also keeps a short status record for each enquiry: no name or message, and your email address only as a scrambled one-way code, so I can tell when someone gets back in touch.
- Amazon Web Services also store the opt-in measurement data, separately, in a private storage bucket in Stockholm, in the EU, that only I can access.
- Amazon Web Services also serve the site through their CloudFront network, which delivers each page securely from a location near you.
- Anthropic runs the chat's AI model (Claude), in the United States, under its standard data protection terms. Anthropic does not use what you type to train its models, and normally deletes it within 30 days.
- Amazon Web Services email me your enquiry so I can reply. Google Workspace hosts my inbox, so that email and our conversation sit there, on Google's servers, under Google's data protection terms.
- My own server holds enquiries sent before October 2026, and takes a new one only if the main system can't accept it. That backup route passes through Cloudflare's network, and its copy keeps the full address of the page you were on, which can include an ad network's click ID.
- Google Fonts and Adobe Fonts supply the typefaces, which means your browser requests font files from their servers. Some demo pages, including the product demos shown on the services pages, load code from jsDelivr, and a few test pages load fonts from Fontshare, in the same way.
Each of those processes data only to provide their service to me. None of them get your enquiry for their own use.
What never happens
- No selling or renting your data. Ever.
- No advertising networks, retargeting pixels, or social media trackers.
- No browser fingerprinting.
- No marketing emails unless you've explicitly asked for something.
How long I keep it
Enquiries are kept while we're in conversation and for up to two years afterwards, in case you come back. Measurement data is kept for up to 13 months, then deleted.
Your rights
Under UK GDPR you can ask me what I hold about you, ask for a copy, ask me to correct it, or ask me to delete it. Email john@bnito.co.uk and I'll sort it, usually same day. If you think I've handled your data badly you can complain to the ICO, but I'd appreciate the chance to fix it first.
Changes
If how this site handles data changes, this page changes with it, with a new date at the top.