Privacy Policy
Last updated: 2 November 2026
This policy explains what ProudSite does with your personal data when you use this website or enquire about our services. It is written to be read, not to be survived.
Who we are
ProudSite builds websites and provides search marketing services to UK businesses. ProudSite is a trading name of EARTHBOOKINGS LTD, a company registered in England and Wales, company number 17305953. We are registered with the Information Commissioner’s Office, registration number ZC275858. We are not VAT registered.
- Email: [email protected]
- Phone: 07714 015444
- Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
We are the data controller for the personal data described below.
This website sets no cookies
We do not set cookies, we do not use analytics that track you, and we do not store anything on your device: no cookies, no local storage, nothing. There is no consent banner because there is nothing to consent to.
If that ever changes, this policy changes first, and anything non-essential will be opt-in, with “Reject All” as easy as “Accept All”. That applies to any storage on your device, not just cookies.
What we collect
This website has no accounts. Your enquiry details reach us only when you choose to contact us (what happens automatically when you load a page is described under “When you visit the website” below):
- Contact form. If you use the form on our contact page, we receive your name, email address, your message, the topic you picked, and your phone number and business name if you give them. The website itself does not store your message: it passes it to Resend (Plus Five Five, Inc., trading as Resend), an email delivery service acting as our processor, which delivers it to our Google Workspace inbox as an email. Resend keeps a copy of each message and its delivery logs for 30 days, in the United States.
- Spam protection on the form. To stop the form being used for spam, the website counts attempts to send a message. A connection is identified by a code calculated from your IP address with a secret key, never the address itself, so the code cannot be turned back into your address without that key. A count is stored only when a message is accepted for sending, and each count covers one hour from its first message (the site-wide count covers one day). After that period the count is deleted when the next message is accepted. While the form is being used, the server also keeps the same code in its working memory to slow down rapid repeat attempts. It is removed by the next request that reaches the spam protection after a minute without another recorded attempt from that connection, or when that server process ends, whichever is first. The counts are held by Cloudflare as our processor. We rely on legitimate interests (keeping the form working and free of abuse).
- Email. If you email us, including from the “Email us this package” button on our package builder, we receive whatever you choose to send, usually your name, email address, business, phone number and the package you picked. Choosing options on the package builder sends nothing to us; only sending the email does. Our email runs on Google Workspace, acting as our processor.
- Booking a call. If you book a call, you do it on Cal.com (Cal.com, Inc.), which handles the booking as our processor. It receives the details you enter: your name, email address, the time you choose and any notes.
| Data | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Your name | To reply to you properly | Legitimate interests: answering a request you made |
| Your email address | To reply to you | Legitimate interests |
| Your phone number, if you give it | To call you back if that is easier | Legitimate interests |
| Your message, business details and any package or topic you picked | To understand what you need | Legitimate interests |
| A keyed code calculated from your IP address, if you use the contact form (see “Spam protection on the form”) | To limit how many messages one connection can send, so the form cannot be used for spam | Legitimate interests: preventing abuse of the form |
| Your booking time and notes | To hold the call you booked | Legitimate interests |
Contacting us is up to you. To reply we need a way to reach you (an email address or phone number); without one we cannot answer.
We do not build a profile of you, we do not use automated decision-making, and we never sell your data.
When you visit the website
Like every website, ours receives your IP address and basic request details (such as your browser type) when your device asks for a page. Our host, Cloudflare, processes them to deliver the pages and to protect the site from attack, acting as our processor; we rely on legitimate interests (running a secure website) and do not use them to identify you. Every image, font and script on the site is served from our own domain, so loading a page sends nothing to any other company. Page content is managed in Sanity, which receives no visitor data.
Transfers outside the UK
Our providers may process personal data outside the UK. Each relies on a recognised safeguard in its published terms:
- Cloudflare (hosting): the UK extension to the EU-US Data Privacy Framework, and otherwise the EU Standard Contractual Clauses as amended by the ICO’s UK Addendum (Cloudflare Customer Data Processing Addendum, section 6).
- Google Workspace (email): transfers to countries the UK recognises as adequate, Google’s adopted alternative transfer solution, or Standard Contractual Clauses (Google Cloud Data Processing Addendum, Appendix 3).
- Cal.com (call booking): the UK extension to the EU-US Data Privacy Framework, and Standard Contractual Clauses where appropriate (Cal.com privacy policy).
- Resend (Plus Five Five, Inc., delivering contact form messages): Resend stores data in the United States; transfers from the UK are made under the EU Standard Contractual Clauses with the UK Addendum, incorporated in Resend’s data processing agreement (section 6.4).
You can ask us for more detail about any of these safeguards.
How long we keep it
Your enquiry, whether it came by email or through the contact form, stays in our inbox while we are talking. We delete it 12 months after our last contact with you, unless you become a client. If you become a client, records relating to the work are kept for 6 years to meet tax and accounting obligations. A call you book is also held as a booking in our Cal.com account; we delete bookings there on the same 12-month schedule. Resend deletes its copy of a contact form message after 30 days. The form’s spam-protection counts are kept as described above.
We do not store or look at the request data your browser sends when you load a page. Cloudflare processes it for us and keeps it only until it is no longer needed to deliver and protect the website (Cloudflare Customer Data Processing Addendum, Annex 1).
Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, and to restrict or object to what we do with it. Where the law gives it (for data you gave us that we process by automated means on the basis of consent or a contract), you can also receive it in a portable form. Where we rely on your consent you can withdraw it at any time, and withdrawing it does not affect anything done before.
Email [email protected] and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, please tell us first; we would rather fix it. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If this policy changes we will update the date at the top, and tell you directly if the change is significant.