Privacy Notice | Beenwise Solutions

1. Who we are

Beenwise Solutions ("we", "us", "our") operates beenwise.org. We are the data controller for the personal information described in this notice, which means we decide why and how it is processed.

For anything in this notice, write toprivacy@beenwise.org.

2. What we collect

We collect three things, and nothing else.

Information you give us through the enquiry form

The form on our contact page asks for your name, email address, project type, and a description of your project. You may also choose to add a company name, website, estimated budget, and preferred timeline. Those four are optional, and leaving them blank does not change how we read your enquiry.

You must tick a box confirming you have read this notice before the form will submit. Anything else you send us afterwards, such as a reply to our email, is held on the same basis.

Information collected automatically

Server logs. Our host records the IP address, timestamp, requested page, referrer, and browser user agent for each request. These exist to keep the site available and secure.
Anti-spam checks. The enquiry form is protected by Cloudflare Turnstile, which examines your IP address and browser characteristics to decide whether a submission is automated. Turnstile is designed to do this without profiling you or tracking you across sites.

Information stored on your device

If you switch between the light and dark theme, your choice is saved in your browser's local storage so the site remembers it next time. That value never leaves your device and is never sent to us. See cookies and local storage for the full list.

We do not run analytics, advertising, or social media tracking. We do not buy personal data, and we do not build profiles of visitors.

3. Why we process it

To read your enquiry, reply to it, and have the conversation that follows.
To send you an automatic confirmation that your enquiry arrived.
To keep a record of what was discussed and agreed.
To keep the site available, and to block spam and abuse.

We do not use your details for marketing. We will not add you to a mailing list, and we will not send you anything you did not ask for.

4. Legal bases

Where the UK GDPR, the EU GDPR, or a comparable law applies to you, we rely on the following bases:

Steps taken at your request before entering a contract. Reading and answering an enquiry about possible work.
Legitimate interests. Keeping the site secure, preventing spam, and keeping records of business correspondence. We have weighed these against your interests and consider them proportionate given how little we collect.
Legal obligation. Retaining records where tax or accounting law requires it, once work is contracted.

We do not rely on consent for the enquiry form, and we do not ask for marketing consent, because we do no marketing.

We do not sell, rent, or trade personal information, and we do not share it with third parties for their own purposes.

Running the site does involve a small number of service providers who process information strictly on our behalf, under contract and on our instructions:

Hosting and content delivery. Serves these pages to your browser and keeps the server logs described above.
Email delivery. Sends the notification to us and the confirmation to you, so the contents of your enquiry pass through it.
DNS, inbound mail routing, and anti-spam. Routes messages sent to our published addresses, and runs the check that keeps automated submissions out of the enquiry form.

Each is bound by a data processing agreement and may not use your information for its own purposes. If you would like to know which providers we currently use, ask us atprivacy@beenwise.org and we will tell you.

We may also disclose information where we are legally required to, or where it is necessary to establish or defend a legal claim.

6. International transfers

Our providers operate global infrastructure, so your information may be processed outside the country you live in, including in the United States. Where that involves a transfer out of the UK or the European Economic Area, our providers rely on transfer mechanisms recognised under those laws, such as Standard Contractual Clauses and the EU-US Data Privacy Framework. We will point you to the relevant documentation for any provider on request.

7. Cookies and local storage

We set no cookies. We store the light or dark theme you choose in local storage on your device. Cloudflare Turnstile returns a short-lived, one-time token when it verifies the enquiry form and is configured not to issue a clearance cookie. We do not use any of these mechanisms for analytics, advertising, or tracking.

Our cookies and local storage notice lists each item, what it is for, and how long it lasts.

8. How long we keep it

Enquiries. Kept while the conversation is live and for as long as reasonably necessary to follow up or maintain business correspondence. Then deleted, unless a legal obligation requires us to keep it longer.
Client correspondence. Where work is contracted, retained for as long as tax and accounting law requires.
Server logs. Retained by our host for a short period under its own policy, then rotated out.
Email delivery logs. Held by our email provider under its own retention policy.

If you want your enquiry deleted sooner, ask us and we will do it unless we are required to keep it.

9. How we protect it

The site is served over HTTPS with a strict Content Security Policy. Enquiry data is validated on the server, escaped before it enters any email, and never written to a database, because there is not one. Access to the inbox that receives enquiries is limited to people who need it. Our API credentials are held as server-side environment variables and are never exposed to the browser.

No system is perfectly secure, and we cannot guarantee that transmission over the internet is free of risk. If a breach affects your rights and freedoms, we will notify you and the relevant supervisory authority as the law requires.

10. Your rights

Depending on where you live, you may have the right to:

ask what personal information we hold about you, and get a copy of it;
have inaccurate information corrected;
have your information deleted;
restrict or object to how we use it, including objecting to legitimate interests;
receive it in a portable, machine-readable format;
withdraw consent, where we relied on it;
not be subject to a decision made solely by automated means. We do not make any such decisions.

If you are in California, you also have the right to know what is collected, to request deletion or correction, and not to be treated differently for exercising those rights. We do not sell or share personal information as the CCPA defines those terms, so there is nothing for you to opt out of.

To exercise anything above, emailprivacy@beenwise.org. We will respond within the period the applicable law allows, and we will not charge you for it. We may need to confirm your identity first. We will act on a request whether or not the law where you live requires us to.

11. Children's privacy

This is a business-to-business site. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.

12. Changes to this notice

If what the site does changes, this notice changes with it, and the date at the top of the page is updated. Where a change materially affects how we use information you have already given us, we will tell you directly. Previous versions are available on request.

13. Contact and complaints

For any privacy matter, including a request under section 10, write toprivacy@beenwise.org. For anything else,hello@beenwise.org reaches us just as well.

If you are not satisfied with our response, you have the right to complain to your local data protection authority. In the UK that is the Information Commissioner's Office; in the EU it is the supervisory authority where you live. We would rather you raised it with us first, so we have the chance to put it right.

What we collect, and why.