How we handle your information

Who we are

Doing it for Doris Consulting ("we", "us") provides digital, data and AI consulting to health and social care organisations in the UK. For the purposes of UK data protection law, the controller of the personal information described here is Phil Neilson, who runs Doing it for Doris Consulting.

If you have any questions about this notice or your information, email phil@doingitfordoris.com.

What we collect, and why

When you email us

If you get in touch, we receive your name, email address, any organisation details you include and the content of your message. We use this only to reply to you and to continue the conversation you started. Our lawful basis is legitimate interests: responding to enquiries people choose to send us.

Please don't send us personal information about the people you support, your staff or anyone else. If an enquiry needs that, we'll agree a safe way to handle it first.

When you visit the website

We use Cloudflare Web Analytics to understand how many people visit and which pages they read. It doesn't use cookies, doesn't build a profile of you and doesn't track you across other websites. We only see totals, never individuals.

The site is hosted on GitHub Pages, and our domain runs through Cloudflare. Like any web host, they process technical information such as your IP address to deliver the pages and keep them secure. We don't receive or use that information ourselves.

Cookies

This website doesn't set any cookies, so there's nothing to accept or decline.

Who we share it with

We don't sell your information or share it for marketing. We use a small number of trusted providers to run the business, who process information on our behalf and under contract:

• Google Workspace, for email
• Cloudflare, for our domain and website analytics
• GitHub, for website hosting

Some of these providers may process information outside the UK. Where they do, they rely on safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK-US Data Bridge.

How long we keep it

We keep enquiry emails for up to two years after our last contact with you, unless the conversation turns into working together, in which case we keep what we need for the length of that relationship and any legal or accounting requirements afterwards.

Your rights

Under UK data protection law you can ask us to:

• tell you what information we hold about you and give you a copy
• correct anything that's wrong
• delete your information
• restrict or object to how we use it
• pass it to you or another organisation in a usable format

Email phil@doingitfordoris.com and we'll respond within one month. There's no charge.

Client work

This notice covers the website and enquiries only. When we work with an organisation, any personal information involved is handled under a separate written agreement with that client, usually inside the client's own systems and under their governance.

Other websites

We link to LinkedIn. If you follow that link, LinkedIn's own privacy policy applies.

If you're unhappy

Please talk to us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.