Your information
Privacy notice
Last updated: 23 September 2026.
Who is responsible for your information?
This website is operated by Sussex Business Solutions Ltd, trading as Opriva, the data controller for travishayler.com. Registered in England and Wales, company number 10172186. Registered office: 16 Beach Road, Littlehampton, West Sussex, BN17 5HT, United Kingdom.
For privacy questions or to exercise your rights, email privacy@travishayler.com or write to the registered office.
Information we use and why
When you enquire, we receive your name, email address, optional organisation name and message, together with subsequent correspondence. We use this to respond, understand your requirements and discuss or deliver an assignment. Please do not send passwords, medical information or confidential client records.
Our lawful basis is our legitimate interest in responding to business enquiries and managing business relationships. Where you personally ask us to take steps towards a contract, or we deliver that contract, we also rely on contractual necessity. We use legal obligation where records must be kept by law.
Hosting and security services process technical information such as IP addresses, browser details, request times and security signals to deliver the website, investigate faults and prevent abuse. Our lawful basis is our legitimate interest in operating a reliable, secure service.
Service providers
- 20i hosts the website and processes technical requests and hosting logs.
- Microsoft 365 receives and stores enquiry emails and business correspondence.
- Exclaimer provides email signatures. Messages routed through its service and relevant sender/directory information are processed to apply those signatures.
- Cloudflare Turnstile processes browser, device and network signals to verify form submissions and help prevent automated abuse. It is a security service, separate from website analytics. See the Turnstile privacy information.
- Google Analytics 4 measures website use only after you accept analytics. It processes online identifiers and information about pages, devices and usage. Our lawful basis is consent. Advertising personalisation and Google signals are disabled in our website configuration.
Cloudflare Web Analytics measures page usage and performance after you accept analytics. It uses a browser beacon without analytics cookies or local-storage identifiers. We apply your analytics choice to both Google and Cloudflare analytics. Cloudflare Turnstile is separate and remains in use for enquiry protection. We do not sell your information or use enquiry details for automated decisions producing legal or similarly significant effects.
Information may also be shared with professional advisers or authorities where necessary to meet legal obligations or establish, exercise or defend legal claims.
International processing
Our providers operate internationally, so information may be processed outside the UK. For restricted transfers, applicable provider data-processing terms use recognised safeguards, such as UK adequacy arrangements or standard contractual clauses with the UK Addendum. Contact us for information about the safeguards relevant to your information. Provider locations and subprocessors can change.
How long we keep information
Unsuccessful enquiries are retained for up to 12 months after the last meaningful contact, then deleted unless a specific legal obligation or dispute requires longer retention. This is our business policy. If an enquiry becomes client work, relevant correspondence forms part of the client record and is retained according to the assignment, accounting obligations and any applicable legal claims.
The website keeps a submission reference, a fingerprint of the submitted fields, a timestamp and a delivery status to prevent duplicate emails and check interrupted submissions. These records do not contain names, email addresses or messages in readable form. They are retained for up to 12 months. Temporary rate-limit records expire after their short protection window, normally within ten minutes.
Technical logs are retained according to the hosting and security providers’ operational schedules and longer only where needed to investigate an incident. Analytics retention depends on the Google Analytics property settings; browser cookie lifetimes are explained in the cookie notice. You can ask us for current provider retention details.
Your choices and rights
You can reject analytics without affecting the website or enquiry form, and withdraw consent through “Change analytics preferences” in the footer. Withdrawal does not affect processing that was lawful before withdrawal.
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information, and object to processing based on legitimate interests. These rights are subject to legal conditions. Contact privacy@travishayler.com; we may need to verify your identity.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would welcome the opportunity to address your concern first.
External websites such as LinkedIn and Opriva have their own privacy notices.