Isaac Rugeris
Back to site Contact
Legal

Privacy policy

Last updated: 22 August 2026

Who I am

I am Isaac Rugeris, a sole trader providing digital operations, systems, automation and administrative services.

Address
53 Clobells, South Brent, Devon, TQ10 9JW

Email
contact@isaacrugeris.co.uk

I am the data controller for the information described in sections 1 to 3 below. Where I handle information on behalf of a client, that client is the controller and I act as their processor. See section 4.

01

Visitors to this website

This website is hosted on Cloudflare Pages. Like most web hosts, Cloudflare automatically records technical information when a page is requested, including IP address, browser type and the pages viewed. This is used to serve the site and to protect it against abuse.

I do not use analytics or advertising cookies on this site, and there is no tracking of individual visitors.

Lawful basis: legitimate interests in running and securing the website.

02

People who contact me

If you email me, fill in a form, or book a call, I hold the information you send: your name, email address, business details, and whatever you tell me about what you need.

I use it to reply to you, to discuss possible work, and to prepare a quote.

Lawful basis: legitimate interests in responding to enquiries, and steps taken at your request before entering a contract.

03

Businesses I approach directly

I contact small businesses to offer my services. If you have received an email or message from me and we have not spoken before, this section explains where your details came from.

What I hold
Business name, business email address, contact name and job title where published, sector, location, and the source I found you through.

Where I got it
Publicly available sources: published job advertisements, business websites, public business directories, and public professional profiles such as LinkedIn. I do not buy contact lists from data brokers.

Why
To introduce my services where they appear relevant to something the business has publicly said it needs.

Lawful basis
Legitimate interests in marketing my services to businesses. I have assessed that this is proportionate: the contact is business-to-business, the message is relevant to something you have published, the volume is low, and you can stop it at any time.

Your right to object is absolute. If you tell me not to contact you again, I will stop immediately and permanently. I keep a record of your name and email address for that purpose only, so that I do not contact you again by mistake.

I only send unsolicited marketing emails to incorporated businesses. I do not send unsolicited marketing emails to sole traders or unincorporated partnerships.

04

Client information

When I work for a client, I usually handle personal information that belongs to their business, for example their customers, enquirers, tenants or staff, held in systems such as a CRM.

For that information, the client is the controller and I am the processor. I only use it on their written instructions, and I do not use it for my own purposes. The terms are set out in the data processing schedule of my client agreement.

If you are an individual whose information is held by one of my clients and you want to exercise your rights, please contact that business directly. If you contact me, I will pass your request on to them.

I also hold ordinary business records about each client, being the signed agreement, invoices, payment records and correspondence. I am the controller for those.

05

Who else is involved

I use a small number of established service providers to run my business. Where they handle personal information on my behalf, they are bound by contract to protect it and to use it only for the purpose I have engaged them for.

ProviderPurposeLocation
Google (Workspace)Email, documents, file storageUnited States
Proton AGEncrypted storage of credentialsSwitzerland
Notion LabsBusiness records and notesUnited States
SignWellElectronic signature of agreementsUnited States
CloudflareWebsite hostingUnited States
TideBusiness banking and invoicingUnited Kingdom
GoCardlessPayment collectionUnited Kingdom
Meta (WhatsApp)Client messaging, where a client chooses itUnited States

I do not sell personal information, and I do not share it for anyone else's marketing.

Transfers outside the UK. Some of the providers above are based outside the UK. Where that is the case, the transfer is covered either by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Addendum.

06

How long I keep information

InformationKept for
Enquiries that do not become work12 months from last contact
Business contacts I approached who did not reply12 months, then deleted
Opt-out recordsKept indefinitely, name and email only, so I do not contact you again
Client working files containing personal informationReturned or deleted at the end of the engagement, at the client's choice
Signed agreements6 years from the end of the engagement
Invoices, payment and accounting records5 years after the 31 January filing deadline for the relevant tax year, as required by HMRC

Where the law requires me to keep a record, I cannot delete it on request. I will tell you if that applies.

07

How I protect information

I use multi-factor authentication on all accounts, a password manager for credentials, encrypted devices, and access limited to what is needed for the work. Working copies of client data are deleted when they are no longer required.

Where I use AI tools in my work, personal information is not entered into them unless it has first been anonymised so individuals cannot be identified. Clients can ask me not to use AI tools in connection with their data at all.

08

Your rights

You have the right to:

  • ask what information I hold about you and get a copy
  • have inaccurate information corrected
  • ask me to delete information, where I am not required to keep it
  • object to my processing, including an absolute right to object to direct marketing
  • ask me to restrict how I use your information
  • receive information you gave me in a portable format
  • withdraw consent, where I have relied on it

To exercise any of these, email contact@isaacrugeris.co.uk. I will respond within one month, and there is no charge.

09

Complaints

If you are unhappy with how I have handled your information, please tell me first and I will try to put it right.

You also have the right to complain to the Information Commissioner's Office:

ICO ico.org.uk 0303 123 1113 Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10

Changes

I may update this policy. The date at the top shows when it was last changed.

Isaac Rugeris, Digital Operations Back to site