Privacy Policy

Last updated: 3 August 2026

This policy explains what personal information we collect when you use this website (black.obsidian.ltd), how we use and share it, and the rights you have over it. We keep data collection to the minimum needed to run the site and respond to enquiries.

1. Who we are

Obsidian Black Ltd is a software consultancy registered in England and Wales (Company No. 10633293), based in Exeter, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for personal information collected through this website.

If you have any questions about this policy or your personal information, contact us at [email protected].

2. Information we collect

Enquiry details. If you use the contact form or email us, we collect your name, email address, company name (if you provide it), and whatever you include in your message.

Usage data (only with your consent). If you accept analytics cookies, we use Google Analytics to understand how the site is used: pages visited, links clicked, approximate location, and the type of device and browser used. We configure Google Analytics to anonymise IP addresses, and we never see your full IP address in analytics reports. If you decline, no analytics data is collected.

Technical logs. Like almost every website, our hosting infrastructure records standard server logs - the IP address, browser user agent, pages requested, and time of each request - which we use to keep the site secure and reliable.

Font requests. This site loads the Inter typeface from Google Fonts. When a page loads, your browser requests the font files from Google's servers, so Google receives your IP address as part of that request. According to Google's font privacy notes, these requests are not linked to Google accounts and are not used for advertising.

We do not knowingly collect any special category data through this website, and we ask that you do not include sensitive personal information in enquiry messages.

3. How we use your information

• Responding to your enquiry and any follow-up discussion. Legal basis: our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.
• Understanding how the site is used so we can improve it. Legal basis: your consent, given via the cookie banner and changeable at any time.
• Keeping the site secure, preventing abuse, and diagnosing faults. Legal basis: our legitimate interest in operating a safe, reliable website.

We do not use your information for marketing, we do not add you to mailing lists, and we do not use automated decision-making or profiling.

4. Who we share it with

We share personal information only with the service providers that make this site work:

• Formspree, Inc. processes contact form submissions on our behalf and forwards them to our email. See the Formspree privacy policy.
• Google provides analytics (only if you consent) and serves this site's fonts. See the Google privacy policy.
• Our hosting provider stores the site and its server logs.

We may also disclose information where the law requires it. We never sell personal information or share it for advertising purposes.

5. International transfers

Formspree and Google may process personal information on servers in the United States. Where personal information is transferred outside the UK, we rely on safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the standard contractual clauses.

6. How long we keep it

• Enquiry correspondence: for as long as it takes to deal with the enquiry, and for up to 24 months after our last contact so we can pick the conversation back up if it resumes. If an enquiry leads to an engagement, related records are kept for the duration of the relationship and for any period required by law, such as accounting rules.
• Analytics data: retained in Google Analytics for no longer than 14 months.
• Server logs: kept for a short rolling period.
• Your cookie choice: stored in your browser (see below) until you clear it.

7. Cookies and local storage

We only set analytics cookies if you choose Accept in the cookie banner. If you decline, the site works exactly the same and no analytics cookies are set. You can change your mind at any time using the Cookie preferences button in the footer. If you decline after previously accepting, analytics stops loading from your next page view, and you can remove any existing cookies through your browser settings.

8. Your rights

Under UK data protection law you have the right to:

• request access to the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your information;
• restrict or object to our processing of it;
• receive a copy of information you provided to us in a portable format; and
• withdraw consent at any time where processing is based on consent, such as analytics cookies.

To exercise any of these rights, email [email protected]. We will respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk. We would welcome the chance to resolve any concern directly first.

9. Policies for client applications

We also build and operate software applications for clients. Where an application requires its own privacy policy - for example, tools that access third-party APIs on a client's behalf - that policy is published separately and governs the application concerned:

• FACT Ads Import privacy policy

10. Changes to this policy

If we change how we handle personal information, we will post the updated policy on this page and revise the date at the top.

11. Contact

Obsidian Black Ltd
Registered in England and Wales - Company No. 10633293
Exeter, United Kingdom
[email protected]