Privacy Policy.
What this website collects, why it is collected, who it reaches and how long it is kept.
Scope
This policy covers personal information collected through this website. It does not cover information handled inside a client engagement, which is governed by the agreement for that engagement.
What is collected
Information provided deliberately
This website asks for personal information in two places. Submitting the contact form provides:
- First name and last name
- Business email address
- Phone number
- Job title
- Company or institution
- Country
- The reason for making contact, and an optional message
Requesting a document that requires registration provides:
- First name and last name
- Business email address
- Company or institution
- Job title
- Country
- Phone number, if it is given
Most documents are open and require nothing. Where registration applies, the page says so before anything is entered, and the full text of the document stays readable without it. The address is not verified and no account is created.
Information collected automatically
When the contact form is submitted, or when a document requiring registration is requested, the browser's user agent string and the IP address the request came from are recorded alongside it. The IP address is also used at that moment to verify the request comes from a person rather than an automated system, and to limit how often the form can be submitted from one connection.
An IP address is treated as personal information here, because it can identify a connection and sometimes a person. It is kept with the enquiry or registration it belongs to, is visible only to the people who administer this website, and is deleted on the same schedule as the rest of that record. It is not sold, is not shared with the parties listed below, and is not used to build a profile or to track anyone across other websites.
A contact form submission also records a small amount of context about how it arrived: thename of the network operator the connection belongs to, which is derived from the IP address and on a workplace connection is often the employer; the page the form was submitted from and the page that linked to it; the browser's language preference; andhow long the form took to complete. This is used to judge which enquiries are genuine and which are automated, and to understand which pages produce enquiries. None of it is shared with the parties listed below.
This website sets one cookie. Requesting a document that requires registration places a short-lived token in the browser so the file can be served without asking for the details again. The token expires after 30 days and carries no name, no address and no record of pages viewed.
This website loads Google's measurement tag on every page, including the page carrying the contact form. It is used to measure advertising and to understand how pages are used. Google receives the address of the page being viewed, the referring page, general device and browser information, an approximate location derived from the network connection, and a record of actions taken such as submitting the contact form. Google sets its own cookies in the browser to recognise a returning visit.
Advertising is also measured from this website's server. When an enquiry is submitted, the server reports to OpenAI that a conversion occurred, carrying a reference number identifying the enquiry, the hashed email address described above and, where the visit began with an advertisement, the identifier that advertisement carried.
When an enquiry is submitted, the email address given is hashed with SHA-256 and only that hashed value is sent to OpenAI, so the enquiry can be matched to the advertisement that produced it. The address itself is never sent and cannot be read back out of the hash. It remains information about a person, because the same address always produces the same value, and it is treated as personal information throughout this policy. No name, phone number, employer, job title or message is sent.
Why it is collected
- To respond to the enquiry and route it to the right people
- To keep a record that the enquiry was received, and what was asked
- To distinguish genuine enquiries from automated submissions
Information submitted through the contact form is not used for marketing, is not sold, and is not shared with anyone outside the parties listed below.
Registration details from a document request are collected to provide the document, to keep a record of who requested it and to allow Silent Harbor to follow up about it. They are not sold and are not shared with anyone outside the parties listed below. A request to stop hearing from Silent Harbor is honoured.
Lawful basis
Where the UK GDPR or EU GDPR applies, Silent Harbor relies on legitimate interestsin responding to an enquiry it did not solicit, and on taking steps at the request of the sender prior to entering a contract where the enquiry concerns engaging Silent Harbor.
For registration details from a document request, Silent Harbor relies onlegitimate interests in providing a document that was asked for and in following up about it. A person may object to that use at any time, and a request to stop hearing from Silent Harbor is honoured.
Who receives it
Silent Harbor uses three service providers to operate this website. Each acts on Silent Harbor's instructions and receives only what is needed.
| Provider | Role | What reaches them |
|---|---|---|
| Cloudflare | Hosting, website delivery, database storage, and automated-submission protection | The submission itself and the request that carried it |
| Resend | Delivery of the notification email that alerts the team to a new enquiry | The contents of a contact form submission, in the body of that notification. Registration details from a document request are not sent to Resend, because no notification is issued for one |
| Measurement of advertising and of how pages are used | The page being viewed, the referring page, general device and browser information, an approximate location derived from the network connection, and actions such as submitting the contact form. Google sets its own cookies to recognise a returning visit | |
| OpenAI | Measurement of advertising, so Silent Harbor can tell which campaigns reach the right people | That a page was viewed and that an enquiry was submitted, with a reference number for the enquiry, the advertisement identifier if the visit began with one and the enquirer's email address hashed with SHA-256. The address itself is not sent, and no name, phone number, employer, job title or message reaches them |
All three providers process data on infrastructure located in the United States. Information is disclosed to no one else, except where Silent Harbor is required to do so by law.
How long it is kept
Enquiry records are kept for as long as needed to respond to the enquiry and to maintain a reasonable record that it was received, after which they are deleted or stripped of the personal details they contain. A defined retention period is being set, and this section will state it.
Registration details from a document request are kept for 24 months, after which they are deleted automatically.
Rights
Depending on where the person is located, rights may include asking for a copy of the information held, asking for it to be corrected or deleted, asking for its use to be restricted, objecting to its use, and asking for it in a portable form.
To exercise any of these, use the contact form and say what is being asked for. Silent Harbor may need to confirm identity before acting on a request. There is also a right to complain to a data protection authority.
Security
Submissions travel over an encrypted connection and are stored on access-controlled infrastructure. Access to enquiry records is limited to people who need it, and is authenticated individually. No method of transmission or storage is completely secure, and the contact form should not be used to send sensitive material.
Children
This website is intended for business use and is not directed at children. Silent Harbor does not knowingly collect information from anyone under 16.
Changes
This policy may change. The date at the top records the last revision. Material changes will be reflected here before they take effect.
Contact
Questions about this policy, or about information held, can be raised through thecontact form.