Last updated 6 September 2026
Privacy notice
I am David Osborne, an individual providing IT and web services to small businesses in and around Lewes, East Sussex. I run the help desk called Prime Resolve. For the personal data described on this page I am the data controller. Contact me at hello@davidosborne.work. I do not publish my home address, but will give it to you on request.
- The short version
- This website
- The help desk
- Booking a call
- Work for clients
- Lawful basis
- Who else handles it
- How long I keep it
- Security
- Your rights
The short version
This website sets no cookies of its own, has no accounts, and uses analytics that cannot identify you. The enquiry form is my help desk, opened only when you click for it. I only hold personal data about you if you email me, raise a request on the help desk, book a call, or become a client. I keep it for as long as I am dealing with you and a little after, on equipment I run myself, and I do not sell it or share it for marketing.
This website (davidosborne.work)
The site is static and hosted on Cloudflare Pages. Cloudflare sees your IP address and browser details in order to deliver the page and defend against abuse, and keeps short-lived logs under its own privacy policy.
Visits are counted with Plausible Analytics, which I host myself. It uses no cookies and stores no personal data. It records the page viewed, the referring site, the browser type and the country, and tells one visit from another with a hash that is thrown away every day and cannot be turned back into you.
The "Tell me what needs sorting" buttons open my help desk inside this page. Nothing from the help desk loads until you click one; once you do, the section on the help desk below applies, including its one cookie.
Your choice of light or dark theme is kept in your own browser's local storage and never leaves it. The live status figures on the front page are fetched from my status page; that request is logged in the ordinary way by my server, and nothing else.
When you email me
Mail to hello@davidosborne.work is forwarded by Cloudflare Email Routing to a Google mailbox I use for this work. I hold what you send, and my replies, for as long as I need them to deal with your enquiry. If you become a client, the exchange becomes part of your client record.
The help desk (help.davidosborne.work)
Prime Resolve runs on Chatwoot, software I host in England on equipment I control. When you raise a request I collect your name, email address, your phone number if you choose to give it, and what you write, including the answers you pick about what the request concerns and how urgent it is. The software also records your IP address and browser so that a conversation can be picked up where it was left. If you reach the help desk from the Support tab inside a client's WordPress dashboard, that tab passes your name, email address and WordPress role so you do not have to type them.
The help desk widget sets a cookie so that a conversation stays attached to your browser between visits. It exists only for that purpose and is not used to track you elsewhere.
When a request arrives I am notified by email through an email delivery service. The notification contains your name and the subject of the request.
Booking a call (book.davidosborne.work)
The booking page runs on Cal.com, software I host myself. To book you give your name, your email address, the phone number you want me to call, and any notes you add, together with the time you choose. The confirmation and reminder emails are sent through Brevo, an email delivery service based in the European Union. The booking is also written to my calendar.
Work for clients
When I work on a client's systems I may see their customers' data: bookings, invoices, email, camera footage. In that case I act on the client's instructions as their processor under our written agreement, and the client's own privacy notice covers that data, not this one.
Lawful basis
| What | Why I am allowed to |
|---|---|
| Answering an enquiry, email or booking | My legitimate interest in responding to people who contact me, and taking steps before a contract at your request |
| Running a client's help desk requests | Performing the contract with the client, and my legitimate interest in keeping a record of what was asked and done |
| Counting visits and defending the sites | My legitimate interest in knowing whether the sites are used and keeping them up. No personal data is kept for this |
| Keeping records for tax | Legal obligation |
I do not rely on consent for any of this, and I do not send marketing email.
Who else handles it
I do not sell personal data or share it for anyone else's marketing. The services that process it on my behalf are:
- Cloudflare: hosting this site, forwarding email, and sitting in front of the help desk, booking and status pages. United States company; transfers are covered by the UK's data bridge and Cloudflare's data processing terms.
- Google: the mailbox that hello@davidosborne.work lands in. United States company; the same safeguards apply.
- Brevo: sending booking confirmations and help desk notifications. Based in France, processing in the European Union, which the UK treats as adequate.
- Plausible, Chatwoot and Cal.com: software I run on my own equipment in England. Nobody at those companies sees your data.
How long I keep it
- Enquiries that go nowhere: deleted within twelve months of the last message.
- Help desk conversations and bookings: kept while you or your employer are a client, and for twelve months after the relationship ends, so that I can answer questions about past work.
- Invoices and records the tax authority may ask for: six years after the end of the tax year, as the law requires.
- Analytics: aggregate figures only, kept indefinitely; there is nothing in them about you.
Security
Every site here is served over HTTPS. The help desk, booking system and analytics run on hardware I own, in England, reachable only through Cloudflare, with administration restricted to me. Backups are encrypted before they leave the machine. I publish the uptime of these systems, not their contents.
Your rights
Under UK data protection law you can ask me for a copy of what I hold about you, ask me to correct or delete it, ask me to restrict how I use it, object to my using it, and ask for it in a portable form. Email hello@davidosborne.work and I will answer within a month. If you think I have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though I would rather you told me first.
None of these services is aimed at children, and I do not knowingly collect data about anyone under eighteen.
If this notice changes, the date at the top changes with it. Anything material will also be mentioned to existing clients directly.