Privacy notice
Last updated · 25 October 2026
Who we are
Fraser Lomond is a trading name of Callum Fraser, a sole trader based in Manchester. Callum Fraser is the controller of the personal information described in this notice. You can contact us about anything in it at hello@fraserlomond.com.
What we collect, and why
When you use the contact form
Your name, work email, organisation and message, plus your phone number, team size and current email system if you choose to give them. We use these only to reply to you and, if you ask, to prepare a proposal.
Lawful basis: our legitimate interest in responding to people who contact us, or steps you ask us to take before entering into a contract.
Spam protection on the form
When you use a form, Cloudflare Turnstile checks that a person rather than a bot is sending it. To do this Cloudflare processes technical information such as your IP address and browser details. It’s used only to stop abuse, not for advertising or tracking.
Lawful basis: our legitimate interest in keeping the site and our inbox secure.
When you email us or book a call
Your name, email address and whatever you choose to tell us. The “Book a call” buttons take you to a Google Calendar booking page provided by Google, which collects your name, email address and chosen time and adds the appointment to our calendar.
When you use the email health check or the DMARC report reader
The domain you type into the email health check is sent to our website, which looks up its public DNS records through Cloudflare’s public DNS service (1.1.1.1) and, if the domain publishes one, fetches its public MTA-STS policy file. The answers are sent back to your browser. We don’t save the domain or the results, and we don’t write them to our logs.
Files you drop into the DMARC report reader are opened and read in your browser and are never uploaded. To put names to the servers in a report, only their IP addresses are sent to our website to look up, in the same way, and they aren’t kept.
To stop the tools being misused, we count how many lookups come from each IP address over one minute. That count isn’t stored after the minute is up.
Lawful basis: our legitimate interest in providing free tools that people ask to use, and in keeping them from being abused.
When you visit the site
Our hosting provider, Cloudflare, processes technical data such as your IP address, browser and the pages requested, so it can deliver the site and protect it from attacks.
Visitor statistics, only if you accept
If you click “Accept” on our cookie notice, we use Cloudflare Web Analytics to count visits and see which pages are useful. It doesn’t use cookies, doesn’t follow you across other websites and doesn’t build a profile of you. If you decline, it never loads. You can change your choice at any time from “Cookie settings” at the bottom of every page.
Lawful basis: your consent.
We don’t use advertising, social media trackers or tracking pixels, and we don’t sell personal information.
Who we share it with
We use a small number of providers who process data on our behalf, under their own data protection terms:
- Google (Google Workspace): email, calendar and the booking page, and the mailbox your form messages arrive in.
- Cloudflare: hosting, security, the form’s spam check, the DNS lookups for the free email tools and, with your consent, visitor statistics.
Google and Cloudflare may process data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or adequacy regulations.
How long we keep it
Enquiries that don’t lead to work are deleted within two years of our last contact. If you become a client, we keep records for as long as the contract lasts and afterwards for as long as the law requires, for example for tax records.
Your rights
You can ask to see the personal information we hold about you, correct it, delete it, restrict how we use it, object to how we use it, or receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Email hello@fraserlomond.com and we’ll respond within one month.
You don’t have to give us any personal information, but we need your name, email address and a message to reply to an enquiry. We don’t make decisions about you by automated means.
If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this notice
If we change how we use personal information, we’ll update this page and the date at the top.