Privacy Policy
Last updated: 6 October 2026
Who we are
This site is operated by Samuel Thomas, trading as STM (“STM”, “we”, “us”), based in Windsor, United Kingdom.
We are the data controller for personal information collected through this website. If you have any question about this policy or about how we handle your information, contact us at samuelthomas@stmscaling.org.
What we collect
When you book a call. Your name, email address, and anything you choose to write in the booking notes. Bookings are handled by Cal.com, which also records the date and time of the meeting.
When you email us. Your email address, your name if you give it, and the contents of your message.
When you browse. Our host, Framer, records basic technical information such as your IP address, browser type, and the pages you visit. This is used to keep the site running and to understand roughly how many people visit.
We do not collect special category data, we do not ask for payment details through this site, and we do not buy personal data from third parties.
Why we use it, and our lawful basis
What we do
Lawful basis
Reply to your enquiry and run the call you booked
Legitimate interests — responding to someone who contacted us
Keep records of enquiries and work discussed
Legitimate interests — running and defending our business
Send you marketing email, if you ask us to
Consent — you can withdraw it at any time
Keep the site secure and working
Legitimate interests — operating the website
Meet our legal and tax obligations
Legal obligation
We do not use your information to make automated decisions about you, and we do not profile you.
Who we share it with
We use a small number of service providers who process personal data on our behalf:
Framer — website hosting
Cal.com — call booking and scheduling
Google Workspace — email
Each of these is bound by a contract that limits what they may do with your information. We do not sell your personal data, and we do not share it with anyone else except where we are required to by law.
Where your information goes
Some of our providers are based outside the United Kingdom, including in the United States. Where that is the case, the transfer is covered by the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision, so your information keeps a similar level of protection to the one it has here.
How long we keep it
Enquiries that don’t become work — up to 24 months, then deleted
Client records — for the length of the engagement and 6 years afterwards, which is what our tax and accounting obligations require
Marketing consents — until you withdraw them, and a record of the withdrawal afterwards
Website technical logs — as long as our host retains them
Your rights
Under UK data protection law you have the right to:
ask for a copy of the personal information we hold about you
have inaccurate information corrected
ask us to delete your information
ask us to restrict how we use it
object to our using it on the basis of legitimate interests
receive your information in a portable format
withdraw consent at any time, where we rely on consent
To exercise any of these, email samuelthomas@stmscaling.org. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.
Cookies
This site uses only the cookies necessary for it to function, set by our host. We do not use advertising cookies or third-party trackers.
Changes
We may update this policy. The date at the top tells you when it last changed.