Privacy notice
Last updated 5 August 2026.
This notice explains what personal information Toad Hall Technical Consultancy Ltd handles when you visit this website or email us, why we handle it, and what you can do about it. It is short because this site does very little: it has no forms, no accounts, no analytics and no advertising.
Who we are
Toad Hall Technical Consultancy Ltd is the data controller for the information described here.
- Registered name
- Toad Hall Technical Consultancy Ltd
- Registered in
- England and Wales
- Company number
- 17383405
- Registered office
- 3 The School House, Upper Belgrave Road, Clifton, Bristol BS8 2AY, United Kingdom
- Contact
- hello@toadtech.co.uk
We have not appointed a data protection officer; we are not required to. Address any question about this notice to the email above.
Nothing is stored on your device
This site sets no cookies and writes nothing to your browser's local or session storage. It loads no fonts, scripts, images, videos or embedded content from anyone else, so no third party learns that you visited. There is no analytics package and no advertising or tracking technology of any kind. That is why you are not being asked to accept anything.
What we collect, and why
Website access logs
Our web server keeps a log of every request made to it. We do not ask you for this information — it is a by-product of your browser fetching the page, and it is collected by observation rather than by anything you fill in. Each entry records:
- the IP address the request came from;
- the date and time of the request;
- the hostname, method and path requested, and the response status and size;
- the user-agent string your browser sends (broadly, which browser and operating system you are using), and the referrer, if your browser sent one.
An IP address can count as personal data, so this notice covers it.
Why: to keep the site available and secure, to investigate faults, and to defend the server against automated abuse.
Automated blocking: these log entries are read automatically by intrusion-prevention software running on the same server. An IP address that produces 30 or more error responses within 10 minutes is blocked at the firewall for one hour, after which the block lifts by itself. That is the only automated decision this site makes. It is temporary and purely technical, it is aimed at the address rather than at you, it produces no legal or similarly significant effect, and no profile of any visitor is built. If you believe you have been blocked in error, email us.
Lawful basis: legitimate interests, Article 6(1)(f) UK GDPR. Our interest is in the security and continued availability of our own website. We have weighed that against your interests: the data is technical, it is not combined with anything else, it is not used to identify or profile you, it is never sold, and it is never shared other than as set out below.
How long: the access log is written to a file that is replaced once it reaches 20 MB, and the five most recent files are kept before the oldest is deleted automatically. How many days that covers depends on how busy the site is; we do not keep an archive beyond those files.
Email you send us
If you email hello@toadtech.co.uk we hold your message, your email address, your name as it appears on the message and anything you choose to put in it or attach.
Why: to read your enquiry and reply to it, and to keep a record of what was agreed if it leads to work.
Lawful basis: legitimate interests, Article 6(1)(f), in dealing with correspondence addressed to us; where the exchange is about engaging us, steps taken at your request before entering into a contract, Article 6(1)(b); and where the correspondence becomes part of our accounting records, a legal obligation, Article 6(1)(c).
How long: for as long as we need it to deal with your enquiry. Where it becomes part of the record of an engagement, we keep it for six years after the end of the financial year it relates to, which is the period our tax and accounting obligations require. Correspondence that leads nowhere is deleted once it is clearly of no further use.
Please do not send us special category information (for example about health, political opinions or religious beliefs) or anyone else's personal data unsolicited. If you must, tell us so in the message.
Who else sees it
- Nobody, for the access logs. They stay on the server that produced them, which is a dedicated machine we rent from Hetzner Online GmbH and administer ourselves. Hetzner provides the hardware, network and physical security; it is not given the logs.
- Google, for email. Our mail is hosted on Google Workspace, so Google LLC processes email you send us on our behalf, under its data processing terms. That may involve a transfer outside the United Kingdom; Google's terms include the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, which is the safeguard relied on for it.
- Anyone we are legally obliged to tell — a court order, or a regulator acting within its powers. We would tell you unless we were prohibited from doing so.
We do not sell personal data, and we do not share it for anyone else's marketing.
Your rights
Under the UK GDPR you have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it erased, to have our use of it restricted, to receive it in a portable form where that applies, and to object to our using it where we rely on legitimate interests — which is the basis for the access logs.
Ask by emailing hello@toadtech.co.uk. There is no charge, and we will answer within one month.
One practical limit: a log entry is an IP address and a timestamp, and we cannot normally tell whose it is. If you want us to act on log data we will need enough detail to find the entries — roughly when you visited and from what address. If we still cannot identify you from what we hold, Article 11 UK GDPR means the rights of access, rectification, erasure, restriction and portability may not apply to that data. Your right to object is unaffected.
How to complain
If you are unhappy with how we have handled your personal information, you have the right to complain to us. That is a right in its own right under section 164A of the Data Protection Act 2018, which took effect on 19 June 2026. Email hello@toadtech.co.uk and say that you are making a data protection complaint. We will acknowledge it within 30 days of receiving it, take appropriate steps to look into it, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority. You do not have to complain to us first, and complaining to us does not take away your right to go to the ICO.
- Information Commissioner's Office
- Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
- Helpline
- 0303 123 1113
Changes to this notice
If what we do with personal information changes, we will change this page and update the date at the top. There is no mailing list to notify, because we do not run one.