This site has no sign-up, no cookies and no advertising. If you have not emailed us or used the process check, we do not know who you are.
Last updated 7 October 2026
23 Works Ltd, company number 16893455, registered in England and Wales. Our registered office is 26 Waterloo Road, Pudsey, LS28 7UW. For anything to do with this notice or your data, email steve@23works.co.uk — it comes to Steve Allen, who is the person who would deal with it anyway.
We are the data controller for everything described here.
We use Cloudflare Web Analytics to count page views and see which pages people read. It sets no cookies, stores nothing on your device, and does not build a profile of you or follow you to other websites. It records the page, the referring site, a general location and the type of browser — nothing that identifies you.
Because it collects no personal data, there is no cookie banner on this site. That is not an oversight.
Our hosting provider, Cloudflare, also keeps short-term security logs that include visitor IP addresses. That is a normal part of protecting a website from attack, and we do not use those logs for anything else.
We get your email address and whatever you choose to tell us. We use it to reply, and to keep track of the conversation if it turns into a piece of work. Our email runs on Google Workspace.
Our lawful basis is legitimate interests — you contacted us about work, so replying and keeping a record of it is what you would expect. If a conversation becomes a project, the basis becomes performance of a contract.
We keep business correspondence for six years, which is the period we may need it for tax and legal purposes. Enquiries that never became work are deleted after two years. We will not add you to a mailing list, and we do not send marketing to people who have only enquired.
You answer six questions about how a job in your business runs, and give us your name and email address so we can send you a copy of the map. A company name is optional.
We send your answers to Microsoft's Azure OpenAI service to draw the map. Microsoft keeps that text for up to 30 days to check the service isn't being misused, then deletes it. It is not used to train any AI model and is not shared with OpenAI. Our Azure service is based in the UK, but Microsoft may handle a request in one of its data centres outside the UK, which is covered by the transfer arrangements below.
Your map gets its own web address so you can open it on any device and forward it to whoever else needs to see it. That address contains 24 random characters and cannot be guessed, but anyone you give it to can read that one map. We keep the map for 90 days and then it is deleted, and the link stops working.
We keep your name, email, company and your six answers for twelve months, so Steve can reply and pick the conversation up if you come back. The emails are sent through Google Workspace. Our lawful basis is legitimate interests — you asked for the map and gave us an address to send it to. We will not add you to a mailing list and we do not send marketing to people who have used the tool.
To stop the tool being abused we also keep a scrambled version of your IP address for two days. It can't be turned back into the address. The form also runs Cloudflare Turnstile, a check that you're a person rather than a bot. It looks at your IP address and browser to do that, and Cloudflare uses what it sees only to spot automated abuse. Please leave customer and staff names out of your answers; the map doesn't need them.
Want it deleted sooner? Email steve@23works.co.uk and it goes, map and all.
Only the suppliers we need to run the business: Cloudflare for hosting, analytics and the bot check on the process check, Google Workspace for email, Microsoft Azure for the process check and the systems we build, and Calendly for booking calls. Our booking links go to Calendly's own site, where you give your name and email address to pick a time; Calendly then passes the booking to us. They process data on our instructions and cannot use it for their own purposes.
Some of these companies are based in the United States. Where data leaves the UK it is covered by the UK's approved transfer arrangements with those providers. We do not sell data, share it with advertisers, or pass it to anyone else without a legal obligation to do so.
Under UK data protection law you have the right to:
Email steve@23works.co.uk and we will deal with it within a month. There is no charge.
If you are not happy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
If we start collecting something we do not collect today, this page changes before that happens, not afterwards. The date at the top tells you when it last changed.