Privacy

Last updated 1 September 2026.

This site is run by Captivated Ltd, which is the data controller for anything described here. The company is registered in England and Wales, company number 15936109, with its registered office at Electric Works, 3 Concourse Way, Sheffield, S1 2BJ, United Kingdom.

If you want to reach a person about anything on this page, the contact page is the way.

The short version

Heart & Industry is a set of static pages. There are no accounts, no forms, no comments and no basket. We set no cookies, we run no analytics, and there is no third-party script of any kind on any page. Nothing you do here is tracked or profiled by us, and there is no advertising network involved.

That is not a policy position we are proud of so much as an architectural one: the site is built to be served as flat files from a CDN, and the things that usually collect data are the things we deliberately did not build.

What does get processed

Our host. The site is served by Cloudflare Pages. Like any web host, Cloudflare receives and logs the requests that reach it, which includes your IP address, the page requested, your browser’s user agent string and the time. That is a normal part of delivering a website and of protecting it from attack. It happens whether or not we look at it, and we do not use it to identify anybody. Cloudflare’s own privacy documentation covers what it does with that data.

Search. The search box does not send anything anywhere. The whole index is a file that downloads with the page and runs in your browser, so what you type into it never reaches us or anyone else. That is a side effect of the site having no server to send it to.

Email. If you write to us, we have your email and whatever is in it, for as long as it is useful to have. We do not add you to anything, because there is nothing to be added to.

When you click through to a shop

Product pages link out to the maker or to a retailer, and some of those links are affiliate links, which means we may be paid a commission if you buy. Those links are marked in the page markup as sponsored, and the about page says plainly how the site is funded.

The moment you click one, you are on someone else’s site under someone else’s terms. The merchant or the affiliate network will typically set a cookie to record that you arrived from here. We do not control that, we do not receive it, and we cannot see what you do once you are there. What we get back is an aggregate count of sales, with no information about who made them.

We never link to Amazon.

Your rights

UK GDPR gives you rights over personal data held about you, including the right to ask what is held, to have it corrected, and to have it deleted. In practice the only personal data we are likely to hold about you is an email you sent us. Ask, and we will tell you what we have or delete it.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If this changes, the date at the top changes with it. The site is small enough that we would rather rewrite this page than bolt an addendum onto it.