What I do with your details.

Who's responsible for your data

Trabelo is a sole trader business run by Aidan Fry, based in Sheffield, South Yorkshire. I'm the data controller for anything you send me. You can reach me any time at aidan@trabelo.com.

What I collect, and when

Only what you choose to give me. There's no account to create and nothing is collected in the background beyond what's described below.

• When you use the enquiry form: your name, email address, business name, website address, what you're looking for, your budget range if you pick one, and anything you write in the message box.
• When you message on WhatsApp or email: whatever is in that message, plus your phone number or email address.
• When I run a free audit: your website's public address and the technical results Google's testing tools return for it. That's information about your website, not about you personally.
• When you book an AI Automation Audit: whatever you tell me about how your business operates — the software you use, your team size, and which tasks are repetitive. This is operational detail about your business, given voluntarily in a conversation, not collected in the background.

What I use it for

• Replying to your enquiry.
• Running your free audit and sending you the report.
• Building and discussing your demo, if you want one.
• Invoicing and keeping basic records, if you go ahead with a build.
• Writing your Automation Audit report, if you book one.
• If you go ahead with building an automation and it needs access to a tool you use, that access is scoped to the job, never stored longer than needed to build and test it, and removed once it's handed over unless you ask for it to continue.

The lawful basis for this is legitimate interest — you contacted a business asking for a service, and I'm replying to you. If we end up working together, it becomes performance of a contract. If I ever wanted to email you about anything other than your own enquiry, I'd ask your permission first.

What I never do

• Sell, rent or share your details with anyone for marketing.
• Add you to a mailing list without you asking to be on it.
• Track you across other websites, or run advertising pixels.
• Use cookies for advertising or profiling.

Cookies

This website doesn't set any cookies of its own — there's nothing to accept or decline, which is why you won't see a cookie banner. Fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers and they may log your IP address as part of serving that request. Nothing about you is stored on your device by this site.

Who else sees your data

As few people as possible. Specifically:

• Web3Forms — the service that delivers the enquiry form to my inbox. Your submission passes through them on its way to me.
• Vercel — hosts this website. Their servers keep standard access logs, which include IP addresses.
• My email provider — because your enquiry arrives as an email and sits in my inbox.

No one else. A website enquiry comes to me and stays with me — there's no CRM full of contacts and no third-party marketing tools. On custom platform projects where Jason or Barney are involved in the build, you'd know that before any work started.

How long I keep it

Enquiries that don't go anywhere are deleted within around 12 months. If you become a client, I keep project and invoice records for six years, because HMRC requires it. You can ask me to delete anything that isn't legally required at any point.

Your rights

Under UK GDPR you can ask me to show you what I hold about you, correct it, delete it, or stop using it. Just email aidan@trabelo.com and I'll sort it — there's no form to fill in and no charge. I'll respond within 30 days, though realistically it'll be the same week.

If you think I've handled your data badly and I haven't put it right, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

The site is served over HTTPS, the enquiry form submits over an encrypted connection, and my email account is protected with a strong password and two-factor authentication. I'm one person rather than a large organisation, so the honest position is that I keep the amount of data I hold small deliberately — it's the most effective protection there is.

Changes to this policy

If this changes, I'll update the date at the top. If it ever changed in a way that materially affected people who'd already contacted me, I'd tell them directly.