Privacy

Last updated 1 November 2026

Vanzio is run by Evan Shields, a sole trader in Scotland. This page explains what personal information I handle and why. If you have a question, email evan@vanzio.uk.

This website

This site doesn't use cookies, analytics or tracking, and it has no forms. The calculator runs entirely in your browser: nothing you enter is sent anywhere or stored. The site is hosted by Cloudflare, which keeps standard server logs (such as IP addresses) to run and protect the service.

When you contact me or book a call

If you email, phone or book a call, I'll have your name, contact details, the business you work for and whatever you tell me. I use this only to reply, arrange and hold the call, and follow up about the work you asked about. Bookings are handled by Google Calendar and emails by Google Workspace. The legal basis is my legitimate interest in responding to enquiries, or taking steps towards a contract at your request.

I keep enquiry details for up to two years after we were last in touch, unless we go on to work together, in which case they're kept as business records for as long as the law requires (usually six years for accounts).

If I've contacted you about Vanzio

I contact owners and managers at businesses that I think could use what I build. To do that I keep a short record of the business, the name and role of the person I'm trying to reach, their work phone and email, and notes of our conversations. I take names and roles from public sources such as Companies House, the business's own website and news articles, or from what you tell me.

The legal basis is my legitimate interest in telling businesses about my services. I check phone numbers against the Telephone Preference Service and the Corporate Telephone Preference Service before calling. If you'd rather not hear from me, say so on the call or reply to any email, and I'll record that and won't contact you again. If we don't end up talking about work, I delete your details 12 months after my last contact.

Client data

When a business asks me for a data review or a build, the business is the controller of its data and I act as its processor under UK GDPR, on its written instructions, under a data-processing agreement. In short:

• Data reviews start from an export with customer names, addresses, phone numbers, emails and free-text notes removed. What's left (such as postcode districts and the CRM's own lead numbers) can still count as personal data, so I treat it that way.
• Builds are done inside the client's own Google account wherever possible.
• Each client's data is kept separate and is never shared with, or used for, any other business.
• Data review exports are deleted within 7 days of the report being delivered, including from Google Drive's bin. Any other copies I hold are deleted when the work ends. I confirm deletion in writing.

If you're a customer of one of my clients and have a question about your data, please contact that business; I'll help them answer.

Who else is involved

I use Google (Workspace and Calendar) for email, bookings and documents, including data reviews, and Cloudflare for website hosting. Builds for clients live in the client's own Google account, under their own agreement with Google. Google and Cloudflare may process information outside the UK, using safeguards approved under UK data protection law. I don't sell personal information or share it for marketing.

Your rights

You can ask to see the information I hold about you, have it corrected or deleted, or object to how I use it. Email evan@vanzio.uk and I'll respond within a month. If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.