Privacy notice

Last updated: 6 August 2026

Who controls your data

This website is operated by Alistair MacLeod, trading as Fell & Forge by Alistair MacLeod, Sole Trader. Fell & Forge is a sole trader, not a company, so throughout this notice “I” means Alistair MacLeod trading under that name. I am the data controller for the personal information described here.

Postal address: 3 St Pauls Court, York, YO26 4TP, United Kingdom.
Email: contact@fellandforge.co.uk

Information I collect

Depending on how you interact with the site, I may collect:

• Your name and email address
• The content of your enquiry, including any commission preferences you describe
• Email correspondence you send me afterwards
• Transaction and order records if you become a customer, for example through Etsy or by direct arrangement
• Limited technical or security information, such as an IP address, where necessary for service logs or handled by Cloudflare Turnstile as described below

How I collect it

Most information comes directly from you, through the contact or commission enquiry form, by email, or in conversation about a commission. Limited technical information is generated automatically by the hosting provider and by Cloudflare Turnstile when you use a form.

Why I use it, and the lawful basis

To respond to your enquiry and take the steps you ask for before any contract

Necessary for taking steps at your request prior to a contract, or my legitimate interest in answering enquiries sent to me.

To discuss and agree a commission, and to perform that contract once agreed

Necessary for the performance of a contract, or for steps taken at your request before one.

To fulfil an order or sale and provide ordinary customer service

Performance of a contract.

To meet tax and accounting obligations

Legal obligation.

To protect this website and its forms from spam, abuse and technical failure

My legitimate interest in keeping the site secure and working correctly.

To establish, exercise or defend legal claims where genuinely necessary

Legitimate interest, or legal obligation where it applies.

Submitting a form is not, by itself, treated as consent for these purposes. Where the law requires consent for something else, for example future marketing, I will ask for it separately and clearly.

Who I share it with

A small number of service providers run this website and help me answer enquiries:

• Resend, to deliver enquiry emails to me
• Cloudflare, for Turnstile form-security checks
• The website hosting provider, to run the site itself
• Etsy, if you choose to buy through the Fell & Forge Etsy shop. Etsy processes that purchase under its own privacy arrangements, which I do not control. See Etsy’s own privacy policy for how it handles your information.

I do not sell your personal information, and I do not share it for other people’s marketing.

International processing

Some of the service providers above may process information outside the United Kingdom. Where that happens, I expect them to apply the appropriate safeguards required by UK data protection law.

How long I keep it

• General enquiries that do not proceed: kept for up to 12 months after your last contact.
• Commission enquiries that do not proceed: kept for up to 24 months after your last contact.
• Completed sales and commissions: transaction and business records are retained for the period required by tax and accounting law.
• Content identified as spam is not retained.

Operational logs are kept to a minimum. Any hosting or reverse-proxy logs that record an IP address for security purposes are intended to be kept for no longer than 30 days, subject to the actual configuration of the hosting provider at the time.

Keeping your information secure

I use reasonable technical and organisational measures to protect the information you give me, including restricting who can access it and using established, reputable service providers for email delivery and form security.

Your rights

Under UK data protection law, you can ask me to:

• Confirm what personal information I hold about you, and provide a copy
• Correct information that is inaccurate or incomplete
• Delete information there is no longer a good reason to keep
• Restrict or object to certain processing
• Provide certain information in a portable format

To exercise any of these rights, email contact@fellandforge.co.uk. I do not use automated decision-making. Cloudflare Turnstile performs an automated check to help tell people and bots apart on the forms, but it never decides whether Fell & Forge accepts a commission or responds to an enquiry. That is always a personal decision by Alistair.

Complaints

If you are unhappy with how your personal information has been handled, please contact me first so I can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk.

Analytics and marketing

At launch, this website does not use analytics, advertising tracking or a mailing list. If that changes in future, I will update this notice and the cookies notice before introducing it.

Changes to this notice

I may update this notice from time to time, for example after changing service providers or adding new functionality. The date at the top shows when it was last updated. This notice is an operational document written for Fell & Forge’s actual practices; it has not been reviewed by a solicitor.