Privacy policy

This policy explains what personal information I collect through simonkramer.co.uk and my emails, why I collect it, how I look after it, and the choices you have. I’ve kept it as plain as I can.

Who I am

This website is run by Simon Kramer, a sole trader based in Stevenage, Hertfordshire. For data protection purposes, I am the controller of the personal information described here.

[If registered with the Information Commissioner’s Office: ICO registration number ZXXXXXXX.]

If you have any question about this policy or your information, email simon@simonkramer.co.uk or write to [postal address].

What I collect and why

When you take the Four Pillars Scorecard

I collect your first name, work email address and company name before the first question, then your answers, your scores and the date. If you tick the box, I also record that you’d like my occasional notes and when you agreed.

I use this to work out and email you your results, to understand where your business stands if we speak, and to follow up personally about your results. If you stop part-way through, I keep the details you entered at the start.

When you send a message through the contact page

I collect your name, work email address, company, phone number (if you give it), the topic you choose and your message. I use this to reply to you and to deal with your enquiry.

When you book a call

Bookings are made through Google Calendar’s booking page. Google collects the details you enter there, usually your name, email address and any notes, and passes them to me so the call can happen.

When we email each other

I keep our emails so I have a record of our conversation and can pick up where we left off.

If you use Simon’s AI FD

If you reply "Support" to your Four Pillars report, I keep the emails you exchange with Simon’s AI FD and a short profile of your business built from what you tell it. Replies are written by an AI model provided by Anthropic, which processes your messages to generate them under terms that don’t allow your information to be used to train its models. I review these conversations. I keep them for two years after the support ends, unless you become a client. Reply "Stop" at any time, or email me to have them deleted.

If I contacted you first

I sometimes email owners and directors of businesses I think I could help. I find business contact details from public sources such as Companies House, company websites and published job advertisements, and I record your name, role, business email address, company details and the source I used. I also record whether you replied, so I don’t contact you more than I should.

Every email I send includes a simple way to tell me to stop. If you do, I’ll stop straight away and add your email address to a short suppression list, so you’re never contacted again.

Technical information

My website doesn’t use cookies, advertising trackers or analytics. Like most websites, the hosting service records basic technical information when you visit, such as your IP address, browser type and the pages requested. I use this only to keep the site secure and working, for example to stop the forms being abused, and it is deleted after [30] days.

My legal reasons for using your information

UK data protection law requires a lawful basis for each use of personal information. I rely on:

• Legitimate interests to send you scorecard results you’ve asked for, to reply to your messages, to follow up personally with people who have taken the scorecard or got in touch, to contact businesses I may be able to help, and to keep the website secure. I’ve considered your interests and believe these uses are reasonable and expected. You can object at any time.
• Consent to send you my occasional notes, if you tick the box. You can withdraw consent at any time by replying “unsubscribe” or using the link in any note.
• Contract where you become a client, or ask me to take steps before we agree to work together.
• Legal obligation where I must keep records, for example for tax.

Who I share it with

I don’t sell your information or share it with anyone for their own marketing. I use a small number of trusted service providers who process information for me, under contract and only on my instructions:

• Google (Google Workspace and Google Calendar): email, calendar and booking.
• Railway: website hosting.
• Neon: the database that stores scorecard and contact form details.
• Anthropic (Claude): the AI model behind Simon’s AI FD, which reads and answers the emails you send to it.
• [AI tools, e.g. Anthropic (Claude)]: I use AI tools to help me draft emails, organise my notes and analyse information. [Confirm which tools, and that the settings used mean your information is not used to train their models.]
• [Any others, e.g. accountant, IT support].

I may also share information if the law requires it, or with professional advisers such as my lawyers or accountant.

Transfers outside the UK

Some of these providers store or access information outside the UK, including in the United States. Where that happens, I make sure the transfer is protected by an approved safeguard, such as the UK’s data bridge with the United States or the UK International Data Transfer Addendum. [Confirm for each provider, and the region chosen for Neon and Railway.]

How long I keep it

• Scorecard and contact form details, and our emails: for [two years] after our last contact, unless you become a client.
• Client records: for [six years] after the work ends, as required for tax and legal purposes.
• Your consent to my notes: until you unsubscribe.
• Contact details for businesses I have emailed: for [two years] after the last email if there is no reply.
• The suppression list: the email address only, for as long as I contact businesses, so I can make sure you’re not contacted again.
• Website technical logs: [30] days.

How the scorecard works

Your scorecard results are worked out automatically from your answers. They are a general guide only and don’t lead to any decision about you with legal or similarly significant effects.

Keeping it safe

I use services with strong security, connections are encrypted, access to your information is limited to me [and anyone working with me on your enquiry], and I review what I keep regularly. No system is completely secure, but I take reasonable steps to protect your information.

Your rights

You have the right to:

• ask for a copy of the personal information I hold about you;
• ask me to correct anything that’s wrong or incomplete;
• ask me to delete your information;
• ask me to restrict how I use it;
• object to my using it, including at any time to direct marketing, which I will always respect;
• ask for information you gave me in a form you can take elsewhere;
• withdraw consent where I rely on it.

To use any of these rights, email simon@simonkramer.co.uk. I’ll reply within one month. There’s no charge in most cases.

If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk or 0303 123 1113.

Children

This website and my services are for business owners and directors. I don’t knowingly collect information about anyone under 18.

Changes to this policy

I’ll update this policy if the way I use information changes. The date at the top shows when it was last changed.