Privacy.
The short version: this site keeps almost nothing, and what you send us is used to reply to you. The long version is below, and it is short too.
Who we are
Bath Limited, registered in England & Wales, company no. 14236546, of 214 High Street, Batheaston, Bath BA1 7QZ. For anything personal this site touches, we are the data controller, and we are registered with the Information Commissioner’s Office. Questions, requests, complaints: write to hello [at] bath.limited or ring 01225 923923.
What this site never does
No cookies — not first-party, not third-party, not one. No analytics, no measurement pixels, no fingerprinting, no advertising, and no requests to anyone else’s servers: the fonts, the images and the scripts are all served from this site. That is why there is no consent banner — there is nothing here to consent to.
None of this is policy alone; it is construction. The page ships with a security policy that forbids it from talking to any other domain, and only scripts matching a fingerprint taken at build time may run. Open your browser’s network panel and count the domains: one.
What your browser keeps for you
Two small preferences live in your browser’s own storage — on your device, never sent to us or anyone: bl-theme if you pin the light or dark ink (set it back to auto and even that is erased), and bl-editions-seen — which editions of the front page your browser has read. Arrive through one of the abbreviated doors — bath.ltd, bath.ltd.uk — and the hand-off carries these across in the address fragment, which never leaves your browser either. Clear your browser’s site data at any time; the site works identically without them.
When you write to us
The enquiry form takes a name, an email address and your message; you can reach us the same way by email, phone or WhatsApp. We use what you send to reply to you and to carry the conversation — in the regulation’s terms, the steps you ask us to take before any contract, and our legitimate interest in answering our own correspondence. There are no mailing lists to fall onto, no marketing to receive, and nothing is ever sold or shared for advertising.
An enquiry that does not become work is deleted within twelve months. When an enquiry does become an engagement, its correspondence is kept as part of the engagement’s records for as long as contract and tax law expect.
Where the site lives
The site is served, and the form first received, by Netlify, our hosting processor, whose servers keep ordinary access logs — the requesting address, the page asked for, the browser’s signature — briefly, for security and operations. Our mail runs on Microsoft 365. Cloudflare answers this site’s DNS, but the pages themselves never pass through it. Each of these processes data for us under its own data-processing terms.
Your rights
UK data-protection law gives you the right to a copy of what we hold about you, to have it corrected or erased, to restrict or object to its use, and to take it with you. One email is enough; we answer within a month and charge nothing. If we ever disappoint you, the Information Commissioner’s Office hears complaints directly — you do not need our permission to go to them, though we would rather put it right ourselves.
Changes
If how we handle data changes, this page changes first, and its date with it. How the site itself is made — the type, the plan, the press — is the colophon’s story, this page’s sibling.
Effective 31 August 2026.