Last updated 28 August 2026.
This notice explains what personal data Sidestream collects through this website, why we collect it, and what rights you have. It is written for the UK GDPR and the Data Protection Act 2018.
Who we are
Sidestream is the data controller for the personal data described here. We are based at 58 Malden Road, London NW5 3HG, United Kingdom. You can reach us at info.sidestream@gmail.com or on +44 7542 401088.
What we collect, and why
We collect personal data in only one way on this website: when you choose to send it to us.
- Contact form. First name, last name, email address, and optionally your organisation, the type of work you are interested in, and your message. We use this solely to answer your enquiry.
- Email and telephone. If you write or call us directly, we hold that correspondence so that we can respond and keep a record of what was discussed.
- Server logs. Our hosting and network providers record standard technical data such as IP address, browser type and the pages requested. This happens for every website and is used for security and to keep the site running.
Our lawful basis
For enquiries we rely on legitimate interests (UK GDPR Article 6(1)(f)): you have asked us to respond, and answering is the obvious expectation. Where an enquiry leads towards an engagement, we rely on steps taken at your request prior to entering a contract (Article 6(1)(b)). For server logs we rely on legitimate interests in keeping the site secure and available.
Cookies and tracking
This website sets no cookies and runs no analytics. There is no Google Analytics, no advertising pixel, no session tracking and nothing stored in your browser by us. That is why you see no cookie banner: there is nothing to consent to.
Two things do involve a third party loading content into your browser, and both transmit your IP address to that provider as a technical necessity:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) supplies the typefaces.
- Unsplash (images.unsplash.com) supplies some photography.
Our network provider, Cloudflare, may set a short-lived security cookie to distinguish human visitors from automated traffic. This is a strictly necessary security measure and carries no marketing function.
Who else processes your data
We keep the list of processors deliberately short.
- Netlify hosts this website and receives contact form submissions.
- Cloudflare provides DNS and content delivery, and therefore handles the technical routing of every request.
- Google (Gmail) hosts the mailbox that receives our correspondence.
- Calendly processes your booking if you choose to schedule a call. You reach Calendly by clicking through to their own site, where their privacy notice applies.
We do not sell personal data, we do not share it for advertising, and we do not add enquirers to a marketing list without being asked to.
Transfers outside the UK
Some of the providers above operate infrastructure outside the United Kingdom, including in the United States. Where that happens, transfers are made under the safeguards those providers offer, such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep it
We keep enquiry correspondence for up to 24 months after our last contact with you, so that we can pick up a conversation that resumes later. Records connected to an actual engagement are kept for six years after the engagement ends, which is the ordinary limitation period for contract claims in England and Wales. You can ask us to delete your data sooner.
Your rights
Under the UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it elsewhere. You can also object to processing that we base on legitimate interests. Write to info.sidestream@gmail.com and we will respond within one month.
If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather hear from you first, but that route is always open to you.
Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top.
References: ICO, UK GDPR guidance · Data Protection Act 2018