Privacy notice
Last updated 16 October 2026
Holdfast is the trading name of Robert Udah, a sole trader based in Bedfordshire, UK. I'm the data controller for the personal data described here. Questions or requests: rob@holdfastapps.com.
What I collect
- What you send me by email: your name, email address and anything you choose to include.
- What you enter when you book a call through Calendly: name, email and any notes.
- During paid work: the contact details of people I work with, and whatever personal data sits in the systems I'm given access to.
This website sets no cookies and runs no advertising trackers. It uses Cloudflare Web Analytics to count visits: it sets no cookies, does not track you across sites, and only reports totals such as page views, referring sites and countries. It also logs, through n8n, which page was viewed, which booking or download link was clicked, the referring website and any campaign tag in the link. Nothing is stored on your device and no IP address or other personal data is kept. My host, Netlify, keeps standard server logs (such as IP addresses) for security.
Why I use it
- To reply to you and arrange calls: my legitimate interest in answering enquiries.
- To deliver work you've asked for: performing our contract.
- To keep business and tax records: legal obligation.
Client systems
When I audit or maintain your app, I access it read-only unless we've agreed otherwise in writing. I don't copy your users' personal data out of your systems, and I process it only as needed for the work, under your instructions and any NDA or data processing terms we've signed.
Who else sees it
The services I use to run the business: Google Workspace (email), Calendly (bookings), Netlify and Cloudflare (website hosting and analytics) and n8n (visit logging and business automation). Some of these may process data outside the UK under the standard safeguards they provide. I never sell personal data.
How long I keep it
Enquiries that don't lead to work: up to 12 months. Client records: six years after the work ends, for tax purposes. Access to client systems is removed when an engagement ends.
Your rights
You can ask to see, correct or delete the personal data I hold about you, or object to how I use it. Email rob@holdfastapps.com and I'll reply within one month. If you're unhappy with my response, you can complain to the Information Commissioner's Office at ico.org.uk.