Privacy, in practical terms.

Who is responsible

Ricardo Calcina, trading as Websites by Ricardo, is the controller for personal information handled by this business.

Email: [email protected]

Further contact information is provided in the operator details.

Site visits and security

Cloudflare provides the site hosting, delivery and security infrastructure. It may process technical request data such as an IP address, device and browser information, requested pages, timestamps and security signals. The lawful basis is Ricardo’s legitimate interest in providing a secure, reliable website and preventing misuse.

The site does not currently use first-party analytics or advertising pixels.

Email and enquiries

If you use the free teardown form, it sends your name, email address, business name, website address, business type, timing, request, message and your two optional choices through a Cloudflare Pages Function, and Resend delivers them to Ricardo’s inbox as an email. If you tick “You can feature my website”, Ricardo may publish a teardown of your public website; otherwise it stays private. If you tick the email option, your first name and email are added to the same email list as the Website Readiness Package, on the consent basis described below.

If you email or enquire, Ricardo uses the contact details and message you provide to respond, assess fit, take steps you request before a possible contract and keep a reasonable record of the conversation. The lawful bases are steps at your request before a contract, performance of a contract where one follows, and legitimate interests in administering enquiries and protecting the business.

Unconverted enquiry records are normally deleted 24 months after the last meaningful contact. Contract, payment and tax records may be retained for up to six years after the relevant relationship or accounting period where needed for legal, tax or record-keeping purposes.

Business research and direct contact

Ricardo researches established businesses that may be suitable for Websites by Ricardo’s website services. Sources include public business websites, contact pages, company records and published professional information. Records may include the business name, website, company details, a professional name and role, business contact address, source and date checked, reason for contact, and correspondence history.

Where this information identifies an individual, the lawful basis is legitimate interests in finding suitable business customers and offering relevant services. Ricardo assesses the relevance, necessity, reasonable expectations and effect of the contact. A public email address does not itself mean someone has consented to marketing. The current unsolicited email campaign is limited to verified corporate business recipients.

Every campaign email identifies Ricardo and Websites by Ricardo and gives a way to object. Reply “no thanks”, or email [email protected], to stop further marketing. An objection stops the sequence across campaign channels. No tracking pixels, purchased contact lists or patient records are used in this workflow.

Google Workspace/Gmail handles business email. GitHub holds private sales records and their version history. Grok Bot helps research public business information, prepare correspondence and carry out authorised follow-through in its cloud environment. Business contact records and relevant correspondence may be processed by these services; Grok Bot can retain files, browser sessions, memory and routines. Cal.com handles call bookings as described below.

Inactive cold-prospect research is reviewed after six months. Identifying details are kept only while there is a relevant business or record-keeping reason; minimal suppression details are retained to respect objections. Reviews include stored copies and version history, so deleting a current tracker row is not treated as complete erasure. Enquiry and contract records follow the separate periods above.

Right-fit calls

The booking and video-call route is supplied by Cal.com. Its embed loads only after all six readiness answers are marked “Yes”. Information entered into the calendar is sent to Cal.com and provided to Ricardo so the call can be arranged and prepared for. The lawful bases are taking requested pre-contract steps and legitimate interests in scheduling and administering calls.

Cal.com explains its own handling in its privacy notice.

Website Readiness Package

If you request the package, the form sends your first name, email address and recorded consent through a Cloudflare Pages Function. Resend stores the contact, delivers the branded HTML email with a plain-text fallback and manages the email preference. The six readiness answers are assessed in your browser and are not submitted with the form.

The lawful basis for the package and occasional useful email updates is consent. You can withdraw at any time using the unsubscribe route in an email or by contacting Ricardo. Contact details are normally removed after withdrawal or 24 months without engagement, except that a minimal suppression record may be kept to respect the opt-out.

Who receives information

Information is shared only where needed with service providers that support the business, currently including Cloudflare for hosting and request security, Cal.com for booking and calls, Resend for the enquiry form and readiness email route, Google Workspace/Gmail for business email, GitHub for private sales records and Grok Bot for AI-assisted business research and authorised correspondence. Professional advisers or authorities may receive information where reasonably necessary or legally required.

Some suppliers may process information outside the UK. Ricardo uses the applicable transfer mechanism provided for the service, such as UK adequacy regulations or approved contractual safeguards. You can ask for more information about the relevant safeguard.

Your choices and rights

Depending on the circumstances, you can ask for access to your personal information, correction, deletion, restriction, portability or an explanation of its use. You can object to processing based on legitimate interests.

You can object to direct marketing at any time. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.

Complaints and questions

Contact [email protected] first so Ricardo can try to resolve the issue. You can also complain to the Information Commissioner’s Office.

This notice may be updated when the site, suppliers or data use changes. Material changes will appear here with a new date.

Cookies and similar storage

Read the separate cookie notice for the current no-analytics position, the Cal.com embed and the checks required before any new tracking is enabled.