Privacy Policy

Who we are

This website is run by TJ Avazona, personal branding strategist and founder of Avazona Ltd, based in Edinburgh, United Kingdom. In this policy "we" and "us" mean TJ Avazona. The data controller for this website is TJ Avazona personally, not Avazona Ltd.

Privacy questions can be sent to tj@avazona.com.

What we collect

• Messages you send us. If you email us, we receive your email address, your name if you include it, and whatever you choose to write.
• Contact forms. The Homepage and Contact page forms require your name and email address and collect your enquiry reason. Company or outlet and message are optional. They send this information through Resend, our transactional email delivery provider, from website@mail.tjavazona.com on the sending domain mail.tjavazona.com to our enquiry inbox at tj@avazona.com. Your email address is included as the reply-to address so we can reply.
• Submission security. A random submission identifier, a signed timing check and an anti-spam field help protect the forms and prevent duplicate sends when a request is retried. They are processed with the request, not stored in a website enquiry database.
• Technical data. Like any website, our hosting provider automatically processes your IP address, browser type and the pages requested so the site can be delivered and protected from abuse.

Cookies and tracking

This website does not use advertising or analytics cookies and does not track you across other websites. Fonts and images are served from this website's own hosting rather than third-party font services.

Why we use your information

We use the information you send us only to read and reply to your enquiry and to keep a record of our correspondence. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into an agreement.

We do not sell your personal information or use it for unrelated marketing.

Who we share it with

• Our website hosting provider, which delivers the site.
• Resend, which processes contact-form information to deliver transactional emails and may retain messages and delivery records under its service arrangements.
• Our email hosting provider, which stores the messages we receive and our related correspondence. Its identity and specific processing and retention arrangements are to be confirmed.
• Professional advisers or authorities where the law requires it.

Resend's configured email-sending region for this website is Ireland (eu-west-1). This determines where emails are routed and sent from; it does not mean that all personal information is stored in Ireland. Resend's region documentation states that account data, including email metadata, logs and API records, is stored in the United States regardless of the sending region. Its Data Processing Addendum (DPA) states that its primary processing operations take place in the United States and that personal data may be transferred outside the UK as necessary to provide its services. The sending region alone does not establish the location of every message copy or subprocessor's processing.

For qualifying restricted transfers from the UK, Resend's DPA provides for Standard Contractual Clauses as amended by the UK International Data Transfer Addendum. These safeguards apply subject to the DPA's terms and the relevant transfer circumstances; confirmation of the terms accepted for our account and the applicable transfer arrangements remains for the owner and legal adviser. Resend's Privacy Policy separately describes its own processing of account and website-user information; the DPA covers customer data processed to provide its services.

Our website hosting provider and our email hosting provider may also process information outside the UK. Their actual processing locations and applicable international transfer safeguards are to be confirmed by the owner and legal adviser. We do not assume that Resend's arrangements cover those separate providers.

How long we keep it

The website does not keep contact enquiries in a database or lead store. Submitted details are processed to send the email; received enquiries and related replies are held in our email correspondence with our email hosting provider.

Our policy is normally to retain contact enquiries and related email correspondence for 12 months after the last correspondence. After that period, personal information should be deleted or anonymized, unless a legitimate continuing business or legal requirement justifies keeping it longer. This is our retention policy, not an automated deletion system; the arrangements for carrying out retention reviews, deletion or anonymization remain to be confirmed by the owner.

This 12-month policy applies to the correspondence we retain and does not determine service providers' separate retention practices. Resend may retain email content and delivery records under its service arrangements, and our website hosting provider may retain technical request records. Resend's relevant retention settings and periods, and our email hosting provider's separate retention arrangements, are to be confirmed; no provider-specific retention period is asserted here.

Links to other websites

This site links to other websites, including Amazon, LinkedIn, Instagram, X, Facebook and TikTok. Those websites have their own privacy policies, and we are not responsible for how they handle your information.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal information, object to or restrict how we use it, and request portability where applicable. These rights depend on the circumstances and lawful basis. If processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. To make a request, email tj@avazona.com.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We will update this page when the way we handle personal information changes and when the arrangements marked "to be confirmed" have been reviewed.