Privacy

Harrison Swan-Campbell, trading as Swan Campbell · Last updated 5 October 2026

Two different things happen here, and they deserve separate answers. Visiting this website collects nothing at all. Becoming a client means I handle your business mail, and that is governed by a written agreement you sign before anything is connected. Both are set out below.

1This website collects nothing

No analytics. No tracking pixels. No advertising tags. No third-party scripts of any kind. No cookies — which is why there is no cookie banner asking you to accept some.

There is no contact form. The only way to reach me from this page is an email address, and following it opens your own mail programme. Nothing is submitted to me until you choose to send it.

The page loads two typefaces from Google Fonts, which means Google receives your IP address in order to serve them. That is the single third party involved in viewing this site, and it is mentioned because a privacy notice that says “nothing at all” while quietly making a request to another company is not being straight with you.

2If you email me

I hold what you send: your name, your email address, and whatever you write. I use it to reply and, if we go on to work together, to set you up. The lawful basis is my legitimate interest in answering people who contact me about my services, and, once we are talking about an agreement, taking steps at your request before entering into one.

Enquiries that do not become clients are deleted within twelve months. I do not add you to a mailing list, and I do not have one.

3If you become a client

Here you are the controller and I am the processor. In plain terms: it stays your data, I only do what you have instructed, and your instructions are the written agreement you sign. This section summarises clause 8 of that agreement, which is the document that actually governs it.

What I handle

The content and metadata of your business email, your calendar entries, and the invoices and receipts you give me.

Whose data that includes

You, your staff, your clients, and anyone who corresponds with you.

What I do with it

Sort your mail, draft replies for you to approve (those replies are never sent by the system), write up meetings, record receipts, and prepare briefs for meetings you are about to have. The only message that can be sent for you is an overdue-invoice reminder, and only after you switch that on in writing and approve the exact template.

How long

For the term of the agreement. Within 30 days of it ending I return anything of yours I hold in a usable format and delete my copies.

4Who else sees it

Three others, and no more without telling you first:

• Anthropic PBC (Claude API, United States) classifies mail and drafts text. Your data is not used to train their models. Because this involves sending data outside the UK, that transfer is covered by a data processing agreement incorporating the UK international data transfer addendum.
• Microsoft or Google — whoever already runs your mail. They continue to hold it exactly as they did before; I connect to your existing account rather than moving anything.
• Telegram sends me a push notification when something in your inbox looks urgent. That alert carries your firm’s name and a count of messages — never a subject line, a sender, or any part of the correspondence. It tells me to look; it does not tell me what at. It reaches my phone and nowhere else: the destination is fixed in the software’s own configuration, and it has no way to be pointed at anyone.

I will tell you in writing at least 14 days before adding any other, and you may object. Nobody else has access to your data: I do not engage a substitute, and there is no team.

5How it is kept

• Credentials are encrypted at rest, and the machine they sit on is encrypted.
• The access you grant is limited to reading and drafting. Sending is off by default. The only message that can leave your mailbox without you pressing Send is an overdue-invoice reminder, and only if you have switched that on in writing and approved the exact template. Replies are never sent by the system. On Microsoft 365, sending permission is only requested if you switch on that reminder. Until then, the consent screen does not include sending. If you later switch that on, you’ll be asked to reconnect so Microsoft can grant it.
• Anything the system is unsure of is held for me to look at rather than acted on.
• Bank details, card numbers and similar are masked on my screen when I review your mail. I do not need to see them to do this work, so I do not.
• You can withdraw my access at any time from your own account settings, without asking me. It takes effect immediately and my stored credentials for you are deleted.

If there is ever a personal data breach affecting your data, I will tell you without undue delay and within 48 hours.

6Your rights

Under UK data protection law you can ask for a copy of the personal data I hold about you, ask me to correct it, ask me to delete it, object to how I am using it, or ask me to restrict it. Ask me and I will answer within one month.

Where I am acting as a processor for a client — that is, if you are one of their customers or correspondents rather than my client — the right way round is to ask them, and I will help them answer you.

If you think I have got something wrong, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.

7Contact

Harrison Swan-Campbell, trading as Swan Campbell.
hswancampbell1@gmail.com

Registered address: [ADDRESS]
ICO registration: [NUMBER]

8Changes

If this notice changes I will update the date at the top. If a change materially affects clients, I will tell them directly rather than relying on them re-reading this page.