Website privacy notice

Last updated 2 October 2026

This notice covers this website, headroomdata.com, and the emails we exchange with people who contact us, or whom we contact about our services. It does not cover data we handle for clients: each client's contract and data processing agreement cover that.

Who we are

Headroom Data is a trading name of Half a Cow Games Ltd, a company registered in England and Wales, company number 17368211, with its registered office at St. Johns House, 5 South Parade, Oxford, Oxfordshire, OX2 7JL, United Kingdom.

We are the data controller for the data described below. You can reach us at [email protected].

What this website collects

This site is a few static pages. It sets no cookies, shows no advertising and embeds no third-party content. There is nothing to sign in to.

We use Cloudflare Web Analytics to see roughly how many people visit and which pages get read. It stores nothing on your device and cannot follow you to other sites. What we see is aggregate: page, referrer, country, browser and device type. We cannot identify you from it.

The site is hosted by Cloudflare, which processes IP addresses in its server logs to deliver the site and protect it from attack.

Lawful basis: our legitimate interest in knowing whether the site works. Because the analytics stores nothing on your device, there is no cookie banner.

If you email us

We keep your address and whatever you tell us, so that we can reply and, if you become a client, do the work.

• If we don't end up working together, we delete it a year after your last message.
• If you become a client, we keep contracts, invoices and the emails about them for six years after the work ends, because UK company and tax law requires business records to be kept.

Lawful basis: our legitimate interest in answering people who contact us; taking steps you ask for before a contract; performing the contract; and our legal obligations for records.

If we contacted you first

We sometimes write to people at businesses we think our work could help. We use work contact details published on your company's website, on LinkedIn or in public business directories, and we use them only to offer our services.

• We email work addresses at limited companies and similar organisations, and every message tells you how to opt out.
• If you ask us to stop, we stop, and keep only your address on a do-not-contact list so that it stays that way.
• If you don't reply, we delete your details within six months.

Lawful basis: our legitimate interest in finding clients. You can object at any time, and we will stop straight away.

Who else handles your data

Cloudflare hosts this site and its analytics. Google Workspace hosts our email. Both act on our instructions. Both are US companies, so data may be processed outside the UK, where it is protected by the safeguards UK law requires, such as the UK–US data bridge or standard contractual clauses. We don't sell your data or share it with anyone for marketing.

Your rights

Under UK data protection law you can ask us for a copy of your data, and ask us to correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Email [email protected] and we will respond within one month.

If you're unhappy with how we have handled your data, please tell us first so that we can put it right. You can also complain to the UK's data protection regulator at ico.org.uk.

Changes to this notice

If we change this notice, we will update the date at the top.