Legal
Privacy policy
Last updated: 20 October 2026
This policy explains what happens to your personal data when you use joelstone.co.uk or contact Joel through it. It's written in plain English. If anything isn't clear, ask.
Who's responsible for your data
joelstone.co.uk is Joel Stone's personal website. It's run by Codebreak Group Limited ("we", "us"), the agency Joel co-owns, which looks after the data the site collects. Codebreak Group Limited is registered in England and Wales, company number 09836360, registered office 4 The Creative Quarter, Shrewsbury Business Park, Shrewsbury, Shropshire, SY2 6LG.
We are the controller of your personal data, which means we decide how it's used and we're responsible for looking after it. We're registered with the Information Commissioner's Office, registration number ZA860940.
Questions about this policy or your data: admin@codebreak.co.uk, or write to us at the address above.
What we collect
When you send an enquiry: your name, email address, and anything else you choose to give us: phone number, organisation, role, website, event details, turnover band, budget range, how you heard about Joel, and your message.
When you reply to us or talk to us afterwards: the content of those emails, calls and messages, and any documents you send.
If you tick the box to get emails from Joel: your name, email address and the date you agreed.
When you browse the site: technical information such as your IP address, browser, device, the pages you visit and how you arrived. Some of this is collected through cookies and similar technologies. The cookie policy explains which ones, and the cookie settings let you choose.
We don't ask for sensitive information (such as health, religion or political views). Please don't include it in your message.
What we use it for, and our lawful basis
| What we do | Why the law allows it |
|---|---|
| Reply to your enquiry and talk to you about it | Our legitimate interest in answering people who contact us, and taking steps you've asked for before any agreement |
| Arrange and deliver talks, workshops, advisory work or services you book | To perform our contract with you or your organisation |
| Send you emails from Joel, if you ticked the box | Your consent, which you can withdraw at any time |
| Understand how the site is used, so it can improve | Your consent through cookie settings, or, for analytics that only produces anonymous statistics, the exception the law allows (you can still switch it off) |
| Show you Joel's ads on Facebook and Instagram after your visit | Your consent through cookie settings |
| Measure which ads lead to enquiries, including sending Meta a hashed (scrambled) copy of your email address and phone number when you enquire, which Meta matches against its own accounts | Your consent through cookie settings. With marketing cookies off, nothing is sent |
| Keep the site and form secure and stop spam | Our legitimate interest in protecting the site and the people who use it |
| Keep business and tax records | Our legal obligations |
Where we rely on legitimate interests, we've weighed them against your rights and kept the use to what you'd reasonably expect. You can object at any time (see "Your rights").
We don't sell your data, and we don't make decisions about you using only automated processing.
Who we share it with
Only with people and services who help us run the site and reply to you, and only as much as they need:
- Netlify, which hosts the site and receives the enquiry form, including checking submissions for spam
- Resend, which sends the emails this site sends: the enquiry that lands in our inbox and the confirmation you get back
- Microsoft 365, which handles our email
- Cortana AI, which measures which marketing brought each enquiry in
- Google (Analytics) and Meta (Facebook and Instagram ads), only if you've switched those cookies on
- Vimeo, which hosts the videos on this site, only if you press play on one
- The Codebreak team, who manage Joel's enquiries and diary
- Our accountants, lawyers and insurers, where needed
- Police, regulators or courts, if the law requires it
Every service provider works under a written contract that limits what they can do with your data.
Data that leaves the UK
Some of the services above are based in, or store data in, other countries, including the United States. When that happens we make sure your data stays protected, using UK adequacy regulations (including the UK-US data bridge where the provider has signed up) or the UK's approved contract terms for international transfers.
How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't go further | 2 years from our last contact, then deleted |
| Client and booking records | 6 years after the work ends, for tax and legal reasons |
| Email list details | Until you unsubscribe. After that we keep only enough to make sure we don't email you again |
| Analytics data | 14 months |
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that's wrong or incomplete
- delete your data
- limit how we use it
- send your data to you or another organisation in a reusable format
- stop using it where we rely on legitimate interests
- stop emailing you, at any time, using the unsubscribe link or by telling us
If we rely on your consent, you can withdraw it whenever you like. That doesn't affect anything we did before you withdrew it.
To use any of these rights, email admin@codebreak.co.uk. We'll reply within one month. If your request is complex we may need up to two more months, and we'll tell you if so. We may ask you to confirm who you are before we act.
Complaints
If you're unhappy with how we've handled your data, tell us first at admin@codebreak.co.uk. We'll acknowledge your complaint within 30 days and let you know what we're doing about it.
You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Children
This site is for businesses and event organisers. It isn't aimed at anyone under 18, and we don't knowingly collect their data.
Changes to this policy
When something changes, we'll update this page and the date at the top. If a change affects you significantly, we'll tell you directly.