Data protection

ClearCDM is a trading style of Robbie Thompson Design Ltd (Co. No. 10355527), which is the controller of the personal information handled through this site and the service. Robbie Thompson Design Ltd is registered with the Information Commissioner's Office under registration reference ZC231436, at 7 Barossa Place, Bristol, BS1 6SU. The contact for anything on this page is [email protected].

The privacy notice says what we collect and why. This page says how we look after it.

The principles we work to

We collect only what the service needs; we use it only for the purposes the privacy notice describes; we keep it accurate and correct it when told; we keep it no longer than the retention periods we publish; we protect it in transit and at rest; and we can show how each of these is done. Personal information is never sold and never used for marketing.

Where information lives

Everything sits in a small, named set of systems. Form and quote submissions travel over encrypted connections to a backend running on Google infrastructure and are stored in Dropbox. The instant quote tool stores your answers in your own browser until you choose to send your quote. Email runs on Google Workspace. The site is served by Cloudflare and holds no personal information itself, and its page view counts come from Cloudflare Web Analytics, which is cookieless and records no personal information. No card payments are taken through the site or the service: fees are paid by bank transfer against an invoice, and card details never reach our systems.

How it is protected

All connections to the site and to the form backend are encrypted. Access to the stored information is limited to the two named people who run the service, Robbie Thompson and James Nicholson. Accounts holding project information are protected by two step verification, and the devices used for the service are encrypted at rest. There are no shared logins and no third parties with standing access.

Your rights and requests

You can ask for a copy of your personal information, ask for corrections, ask for deletion where the law allows, and object to processing based on legitimate interests. Write to [email protected] and you will have a substantive answer within one month. If you are unhappy with the answer you can complain to the Information Commissioner's Office at ico.org.uk.

If something goes wrong

If personal information is lost, exposed or altered in a way that risks harm, we contain the problem, assess who is affected, report to the Information Commissioner's Office within 72 hours where the law requires it, and tell affected people without undue delay, plainly, including what happened and what we are doing about it.

How long we keep things

Retention periods are published in the privacy notice: project records for 15 years after the project ends, matching how long a legal claim about the works could still arise, and enquiries and quotes that do not become appointments for 12 months. When a period ends the records are deleted from the systems above.

This page was last reviewed on 25 August 2026. It is reviewed at least yearly and whenever the systems it describes change.