Who we are
This site is run by Black Mountain Technology Group Ltd (company number 16800922), trading as Black Mountain Tech, of 4th Floor, 14 Museum Place, Cardiff CF10 3BH. We are the data controller for the personal data described here. Questions about this policy, or about your data, go to contact@blackmountaintech.co.uk.
What we collect and why
We only collect personal data when you give it to us through one of the forms below, or through analytics if you accept cookies.
Booking a call
When you request a call we collect your name, email address, the date and time you asked for, and how you would prefer to be contacted. Optionally you may also give a phone number, business name, current website address and a note about what you want to discuss.
We use this to confirm the call, hold it, and follow up about the work you asked about. The request is emailed to our inbox and a copy is emailed to you. Lawful basis: taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b)), and our legitimate interest in responding to enquiries.
Contact form
The contact form collects your name, email address, the service you are interested in and your message, plus a phone number and company name if you choose to give them. We use this to reply to you. Lawful basis: as above.
Free website audit
The audit tool asks for a website address and, optionally, approximate monthly visitor numbers and average order value. To run the check, the website address is sent to Google's PageSpeed Insights service, which fetches and measures that page. If you then enter your email address to unlock the full report, your email address and the audit result are emailed to our inbox and you are added to our newsletter list. Nothing is stored in a database on the site. Every newsletter has an unsubscribe link and you can leave at any time. Lawful basis: consent, which you give by entering your email address.
Analytics
If you accept analytics cookies we use Google Analytics 4 to understand how the site is used: which pages are visited, roughly where visitors come from, what device they use, and whether a visit led to a booking request or audit. IP addresses are not stored by Google Analytics 4. We do not use advertising features or sell data. Lawful basis: consent, given through the cookie banner. See Cookies below.
If you email us directly we keep the correspondence for as long as we need it to deal with your enquiry or any work that follows.
Who we share it with
We never sell personal data. We use a small number of service providers who process data on our behalf under contract:
- Resend sends and delivers our email, including booking requests, audit reports, confirmations and the newsletter list.
- Vercel hosts the site and processes standard server logs (IP address, browser, pages requested) to serve it securely and keep it running.
- Google provides PageSpeed Insights (receives the website address you enter in the audit tool) and Google Analytics 4 (only if you accept analytics cookies).
Some of these providers process data in the United States. Where that happens it is covered by the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework.
We may also share data where the law requires it, or with professional advisers if a dispute arises.
How long we keep it
- Booking requests and contact form messages: for as long as needed to deal with the enquiry, and for up to 24 months after our last contact, unless you become a client, in which case for the life of the relationship and six years after it ends for accounting and legal purposes.
- Audit results and newsletter sign-ups: until you unsubscribe, or 24 months after your last interaction with us.
- Analytics data: 14 months, Google Analytics' standard retention period, after which it is deleted or aggregated.
- Server logs: retained by Vercel for a short rolling period for security and reliability.
Cookies
This site sets two kinds of cookie-like storage:
- Strictly necessary. A single entry in your browser's local storage that remembers your cookie choice, so we do not ask you again on every page. It contains no personal data and lasts 12 months.
- Analytics (optional). If you accept, Google Analytics sets cookies beginning
_gato recognise your browser across visits. They last up to two years. If you reject, no analytics cookies are set and nothing is loaded from Google.
You can change your mind at any time using the Cookie settings link in the footer. You can also delete cookies in your browser settings.
Your rights
Under UK GDPR you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that is wrong;
- delete your data, where we no longer have a reason to keep it;
- stop or limit how we use it, or object to our use of it;
- withdraw consent at any time, where consent is the basis we rely on, without affecting anything done before;
- give you your data in a portable format.
Email contact@blackmountaintech.co.uk and we will respond within one month. If you are not happy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, but we would appreciate the chance to put it right first.
Security
The site is served over HTTPS. Form submissions go straight to our inbox through an encrypted connection and are not stored in a database on the site. Access to our email and provider accounts is restricted to the people who need it.
Children
This site is aimed at businesses and is not intended for anyone under 16. We do not knowingly collect data from children.
Changes to this policy
If we change how we use personal data we will update this page and the date at the top. Significant changes will be flagged on the site.
Get in touch if anything here is unclear.