Privacy

Last updated 19 October 2026.

This is a simple website. It uses two analytics services to count visits, both explained below, and you can turn Google Analytics off on this page. The only thing to fill in is the optional scorecard.

Who I am

This site belongs to Wayne Gibbins. I'm responsible for any personal information you send me through it. You can reach me at [email protected].

What this site collects

• Anonymous page counts. I use Cloudflare Web Analytics to see how many times each page is viewed and which sites visitors came from. Cloudflare says it doesn't use cookies or local storage, doesn't fingerprint visitors, and doesn't collect or use visitors' personal data. More at cloudflare.com/web-analytics.
• Google Analytics. I also use Google Analytics to see how people use the site, so I can improve it. It sets its own cookies, explained in Google Analytics below, and you can turn it off.
• No other cookies. Apart from Google Analytics, the site doesn't set any. Your colour theme choice, if you change it, is kept in your own browser's storage and never sent anywhere, and so is your analytics choice, if you turn it off.
• One optional scorecard. If you take it, your answers are saved as described in If you take the scorecard.

Google Analytics

I use Google Analytics 4 to see how people use this site, so I can improve it: which pages are read, how visitors arrived, roughly where they are (country or city), and what kind of device and browser they use. Google acts as my processor. Google says it doesn't log or store the IP addresses of UK visitors: it uses them only to work out a rough location, then discards them.

It sets cookies named _ga and _ga_… so it can tell a new visit from a repeat one. By default they last up to two years. I've turned off Google signals and ad personalisation, so the statistics aren't used for advertising.

Google keeps the detailed, visit-level data for 2 months; the summary reports (page counts and the like) aren't deleted on that schedule. Google may process the data outside the UK under its data protection terms.

It runs only on waynegibbins.com itself, never on test versions of the site or on its private admin pages.

Since 5 February 2026, UK law has allowed cookies like these without asking first, when they're used only to collect statistics about how a service is used so it can be improved, as long as you get clear information and an easy way to object. This section is the information. This switch is the easy way to object:

The switch stops Google Analytics on this device straight away and removes its cookies. If JavaScript is turned off, Google Analytics doesn't run at all, and you can also block cookies or scripts in your browser's settings. Cloudflare Web Analytics sets nothing on your device, so there's nothing to switch off for it.

If I change or add an analytics service, I'll say here which one and what it records.

What your browser shares anyway

Like every website, this one is served by a hosting company, Cloudflare. When you visit, your browser sends the usual technical details, such as your IP address and browser type, and the host may keep these in its server logs for a short time to run and protect the service. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

The fonts are stored on this site, so no other company is contacted when the page loads.

If you take the scorecard

The scorecard works out your score in your browser. When you finish, your multiple-choice answers are saved on this site with your score and a reference number, and the scorecard sets no cookie. I use them to see how businesses answer and to count how many people start and finish the check. They don't include your name, email address or IP address unless you ask for the full report or click to book a call, as below.

If you ask for the full report, you give an email address (a work one, if you have it), and you can add your name, your business name and a note. From then on, these are kept with your answers. I use them to show you the report and, if you'd like, to reply to you personally. The report is shown on screen; it isn't emailed. My lawful basis is legitimate interests: replying to someone who asked.

Your answers also help me decide how best to follow up, for example whether to suggest a call or a free demo. A simple points system does this, I read every response myself, and it never stops you booking a call or emailing me. You can ask me not to use your answers this way.

There's a separate box to tick if you'd like occasional notes from me on growing or running a business more efficiently. It's never ticked for you. I use it only with your consent, which you can withdraw at any time.

If you click to book a call from your results, the booking link passes only your reference number and where you came from (for example, LinkedIn or a letter) to Calendly, as tracking codes in the link, as soon as the booking page opens, whether or not you go on to book. None of your answers go to Calendly. I use the reference to look up your answers before we talk.

To stop abuse, the scorecard keeps a short-lived code made from your IP address with a secret key, never the address itself, to limit how often one connection can send answers. Codes older than ten minutes are deleted the next time anyone uses the scorecard.

Everything you send through the scorecard is stored with Cloudflare, which hosts this site, in its European Union data centres. Only I see individual responses, on a private page behind a login. If I use an AI assistant to help me reply, I remove your name, email address, business name and website first, so the assistant sees your multiple-choice answers and scores. I check any note you wrote by hand and remove anything identifying before an AI assistant sees it. To prepare for a call, I may research your business from public information. Totals and averages may appear in my writing; individual answers never do.

If you use the demo version of the scorecard, your answers aren't saved: they stay in your own browser's storage, marked as fictional.

Names, email addresses and notes are deleted automatically 12 months after you send them, and straight away if you ask: email [email protected]. The answers are kept, without contact details, as statistics. I don't sell or share any of it.

If you book a call

Booking a call goes through Calendly, which receives your name, your email address and anything you choose to enter. Calendly sets its own cookies on its booking page. Calendly's privacy notice, which explains them, is at calendly.com/legal/privacy-notice.

If you email me

If you email me, I receive your name, your email address and whatever you choose to write. I use it only to reply and, if we work together, to run that work. My email is provided by Proton, so your message is stored on Proton's servers. Emailing me doesn't add you to any mailing list; the only way onto my newsletter is the box on the scorecard. I don't sell or share your details.

I delete enquiries that don't lead to work after 12 months.

If I've emailed you

If I've sent you an email introducing myself, I found your business contact details in public company records and on your company's website. I used them for a one-off introduction that I thought was relevant to your business. I don't collect personal or home contact details.

I rely on legitimate interests as the lawful basis for this one-off business contact, and I stop as soon as you ask.

If you'd rather not hear from me, reply with "no thanks". I'll remove your details and add your address to a suppression list, so I don't contact you again.

If I've written to you

If I've sent you a letter introducing myself, I found your details in public company information: Companies House and your company's own website. The information I hold is your name, your role, your business address, and public information about your company from Companies House (such as when directors were appointed). I used it for a one-off introduction that I thought was relevant to your business. I don't collect personal or home contact details.

I rely on legitimate interests as the lawful basis for this one-off business contact, and I stop as soon as you ask.

The letter was produced by a UK handwriting service, acting on my instructions as my processor.

If you'd rather not hear from me, reply to the letter or email [email protected]. I'll remove your details and add you to a suppression list, so I don't contact you again.

Your rights

Under UK data protection law you can ask to see the personal information I hold about you, have it corrected, or have it deleted. Email me and I'll respond within one month.

If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.