Privacy notice

Who is responsible

Elliott Shah trading as Reply & Route (sole trader) is responsible for personal information collected through this website and our own sales enquiries. Contact: elliott@replyandroute.co.uk; postal contact: Office 10775, 321-323 High Road, Chadwell Heath, Essex, RM6 6AX, UK.

What we collect

Information you send us by email or phone: business/contact name, work email, optional phone/website, service area and message. Our website hosting and security provider (Cloudflare Pages) and domain/DNS provider (Namecheap) may receive technical data such as IP address, browser/device details and access or DNS query logs when you visit or resolve this site. Our business email provider (Zoho Mail on Zoho's UK/EU service at zoho.uk) processes the content of emails you send to us.

Why and our lawful bases

We use business-contact information to respond, assess fit, prepare proposals and manage client relationships under legitimate interests. Where you are personally party to a contract, we may rely on contract. We keep records required by law under legal obligation. Optional marketing relies on consent, and you may object to direct marketing at any time.

Who receives it

Only those who need it to provide our services, under appropriate terms:

• Cloudflare, Inc. (United States) — website hosting and security via Cloudflare Pages. Cloudflare may process personal data globally to deliver the service.
• Zoho (Zoho Mail on the zoho.uk service) — business email. Service data for UK accounts on this service is hosted in Zoho's European data centres (Amsterdam and Dublin).
• Namecheap, Inc. (United States) — domain registration and DNS. Namecheap processes relevant account and DNS data on US-based systems.

We may also share information with advisers or authorities where lawful. We do not sell personal information.

International transfers

Some of our providers process personal data outside the UK:

• Cloudflare: Cloudflare's Customer Data Processing Addendum provides that, where a UK GDPR transfer is a restricted transfer, the EU Standard Contractual Clauses apply as amended by the UK International Data Transfer Addendum (Version B1.0) issued by the ICO. Cloudflare also states that it complies with the UK Extension to the EU-U.S. Data Privacy Framework; transfers made under that framework are not treated as restricted transfers under that DPA.
• Zoho: Zoho's UK Privacy Policy states that personal information and service data may be processed, transferred and stored in the United States, the EEA and other countries where Zoho operates, subject to appropriate data protection agreements required by UK law. Zoho offers a Data Processing Addendum based on Model Contractual Clauses / Standard Contractual Clauses. Zoho also notes that, in some support scenarios, EU-hosted service data may be accessed from Zoho entities in India under Standard Contractual Clauses.
• Namecheap: Namecheap's Data Processing Addendum states that Customer Data may be transferred to the United States for processing and, for UK-governed transfers, incorporates the UK Standard Contractual Clauses as defined in that addendum.

Retention

Unsuccessful enquiries up to 12 months after the last meaningful contact; contract and accounting records for the applicable statutory period; minimal suppression records as long as needed to honour objections.

Your rights

Depending on the circumstances you can request access, correction, deletion, restriction or portability, or object to processing. Contact elliott@replyandroute.co.uk. You may complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.

Cookies

This site does not use advertising or analytics cookies. Cloudflare Pages itself does not set cookies for a plain static site. Cloudflare's network may set strictly necessary cookies only if specific Cloudflare features are enabled (for example bot protection, challenges, load-balancer session affinity or rate limiting). We have not enabled those features for this site, so no Cloudflare cookies are expected by default. We do not add our own cookies.