Privacy notice

Last updated 10 October 2026

This notice explains how ByIntent collects, uses and protects personal data when you visit byintent.co.uk, contact us or work with us. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

Who we are

ByIntent is the trading name of Arxhent Xhelili, a sole trader based in London. ByIntent is the controller of your personal data, which means we decide how and why it is used.

You can contact us about anything in this notice by email at hello@byintent.co.uk or by post at ByIntent, 124 City Road, London, EC1V 2NX.

What we collect

• Contact form. Your full name, company and email address. If you use any of our diagnostic tools and choose to include your result with a message, we also receive your result and the targets you set.
• Emails and calls. Anything you choose to share when you email us or speak to us.
• Clients. Business contact details and the information needed to agree, deliver and invoice our work.
• Technical data. Our website host keeps short term server logs, such as IP address and browser type, to keep the site secure and working.

We do not ask for, and ask you not to send, special category data such as health information through the website.

All of our diagnostic tools run in your browser. Your answers are not sent to us or stored anywhere unless you tick the box to include your result with a contact form message.

How we use it and our lawful basis

• Replying to your enquiry. Legitimate interests, as you have asked us to get in touch and we need your details to do that.
• Preparing proposals and delivering work. Contract, or taking steps at your request before entering into one.
• Keeping financial and business records. Legal obligation under UK tax law.
• Keeping the website secure. Legitimate interests in protecting our site and its visitors.

We will not send you marketing emails unless you have clearly asked to receive them, and you can opt out at any time. We do not sell your data, and we do not use it for automated decision making or profiling.

You don't have to give us your details, but without an email address we can't reply to you.

Who we share it with

We only share personal data with trusted providers who help us run the business, under contracts that require them to keep it secure and use it only on our instructions.

• Netlify, which hosts this website and processes contact form submissions.
• Our business email provider, which stores the messages we send and receive.
• Our accountant and professional advisers, where needed to run the business.

We may also share data where the law requires it, for example with HMRC.

International transfers

Some of our providers, including Netlify, are based in the United States or store data outside the UK. Where this happens, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK and US data bridge where the provider is certified. You can ask us for more detail about these safeguards.

How long we keep it

• Enquiries that don't lead to work. Deleted within 12 months of our last contact.
• Client and financial records. Kept for six years after the end of the tax year they relate to, in line with UK tax and legal requirements.
• Server logs. Kept by our host for a short period, as set out in Netlify's own policies.

How we protect it

We use reputable providers, secure connections (HTTPS) across the website, strong passwords and two factor authentication on our accounts, and we limit access to your data to what is needed.

Cookies

This website does not use cookies, analytics or advertising trackers, and our fonts are hosted on our own site rather than loaded from a third party. If this changes, we will update this notice and ask for your consent where the law requires it.

Your rights

Under UK data protection law you have the right to

• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to us using your data on the basis of legitimate interests
• ask us to transfer data you gave us to another organisation, where this applies
• withdraw consent at any time, where we rely on consent

To use any of these rights, email hello@byintent.co.uk. There is no charge, and we will respond within one month. We may need to confirm your identity first.

Making a complaint

If you are unhappy with how we have handled your personal data, please tell us first by email at hello@byintent.co.uk or by post to the address above. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

If you are still not satisfied, you can complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this notice

We will update this notice if the way we handle personal data changes. The date at the top shows when it was last revised.