Privacy
This site keeps very little about you.
Effective October 18, 2026
Getting in touch does, because it has to. This page says what arrives, who else can see it, how long it is kept and what you can make us do with it, wherever in the United States you are reading from.
01 Who holds it
Teialoom is Daniel Leite, a sole trader in the United Kingdom, working from Liverpool. There is no company behind the name yet, and no office or representative in the United States. Everything below is held by that one person, who is responsible for it as the data controller under UK data protection law, the UK GDPR, wherever you are reading from. The way to reach us about any of it is daniel.leite@teialoom.com.
02 What the site itself does
Very little. No page of teialoom's own sets a cookie, only the client brief stores anything in your browser, the answers you have not sent yet, and the fonts and the images are served from this domain rather than borrowed, so loading a page tells no third party anything for advertising. Umami counts the visit, as the next section sets out. The free site review sends what you typed, and nothing is sent until you press the button. The demo sites under /demo/ show other businesses' designs; some load fonts from Google, and one, the airport demo, has a chat whose messages are answered by Anthropic's AI. The cookie notice says the same thing at more length.
03 What we collect
These are the categories of personal information we collect, and there are no others. From the site review form: your name, your email address and your website address. From booking a call, through Calendly: your name, your email address, the time you picked and anything you type into the box; the call itself is a video call on the service the booking names. By email, WhatsApp or phone: whatever you choose to say, and the email address or phone number you use. From the chat on the airport demo: whatever you type into it. From every visit, without you doing anything: through Umami, the page you looked at, the site that sent you, the kind of browser and device, roughly where you are and which of our contact links you pressed; and through Cloudflare, which serves the site, the request itself, including your IP address. If you become a client, we also hold what running your site needs: your business details, what you send us for the site and the record of what you have paid. Nothing is inferred, bought or added from anywhere else.
04 Who else can see it
Brevo sends the two emails the review form produces, the one to us and the confirmation to you, and keeps a record of both. Brevo is a French company and that mail is handled inside the EU, so what you type into the form leaves the United States when you send it. Formspree, a US company, also receives a copy of what you type into the review form (your name, email and website address) and keeps it under its own policy. Umami holds the visit counts described above, with no cookie and nothing stored in your browser. Calendly holds every booking, and Calendly is a US company, so a booking stays in the United States when you make it and reaches the UK when we open it; the video call runs on the service the booking names. Anthropic, a US company, answers the chat on the airport demo and sees what you type there and nothing else. WhatsApp messages sit with WhatsApp, which is Meta. Email sits with the company that runs our mail. Cloudflare, also a US company, serves this site and sees the request that fetched it, which is a server log on their side rather than anything handed to us. If you become a client, a payment provider takes your card or ACH payments and holds those details under its own policy; it will be named on this page before it holds anyone's. Each is a separate company with its own policy. We do not sell personal information, and none of these companies is given any for advertising.
05 If you edit your own site
Clients who change their own site do it in Teialoom CMS, which runs on a server we rent from IONOS in the United Kingdom, so your sign-in details leave the United States. Signing in keeps your name and your email address there, and for each sign-in the time, your IP address and the browser you used. The sign-in codes and invitations it emails are sent by Brevo, inside the EU. What you save goes into your site's own files, which are kept on GitHub, a US company. Your account is deleted when we stop running your site.
06 Why we are allowed to hold it
UK data protection law asks for a reason for everything held, and these are ours. An inquiry is held to answer it, which is the step before a contract you asked for. A client's details are held to build and run their site, which is the contract itself. Invoices and the records behind them are held because UK tax law requires it. Nothing here rests on consent, which means there is no consent to withdraw, and nothing is used for marketing, so there is no list to come off.
07 How long it is kept
An inquiry that goes nowhere is deleted after twelve months. A client's working files and correspondence are kept for as long as we run the site, and for a year after it ends in case something is needed back. Invoices and accounting records are kept for six years, which covers what UK tax rules require of a sole trader and is not ours to shorten.
08 Seeing and correcting what we hold
You can ask for a copy of everything held about you, a correction, a deletion, or a copy in a form you can take elsewhere. These are UK rights, and they are owed to everyone whose information we hold, including you in the United States. Ask at daniel.leite@teialoom.com and the answer comes inside a month, free. The US state laws that give residents rights over their data, California's among them, apply only to businesses far larger than this one, so we make no claim to comply with them; the UK rights above are the ones you have. If our answer is unsatisfactory, the Information Commissioner's Office is the UK regulator to complain to, it accepts complaints from outside the UK, and going to it does not stop you asking us again.
09 Do Not Track
We do not change anything when your browser sends a Do Not Track signal, and Umami counts the visit either way. There is nothing here for the signal to switch off: nothing on these pages follows you from one site to another, Umami counts a visit to this site and cannot connect it to anything you do elsewhere, and no third party is given anything on these pages to track you across other sites. Global Privacy Control is treated the same way. It asks a site not to sell or share your information, and we do neither.
10 If this changes
Adding a newsletter, advertising or anything else that collects more would mean changing this page first, and the cookie notice with it. A change goes on this page before it takes effect, and the date at the top is the day the current version took effect. If you are reading this on a version of the site that asked you to accept cookies, or that took anything from you beyond what is listed above, this page is out of date and that is a bug worth telling us about.
Questions about any of this: daniel.leite@teialoom.com. A reply inside a month, free.