Privacy Policy

Effective 14 May 2026 · Evans Solutions Ltd · England & Wales

Evans Solutions Ltd (trading as ESL) takes privacy seriously. This policy explains exactly what data our website collects when you visit, why we collect it, and your rights under UK GDPR. We have kept it short on purpose — no padded legalese, just the facts.

What we collect

We run our own self-hosted analytics. When you visit a page we record:

• Page path — which URL you visited (e.g. /services).
• Referrer domain — the site that sent you here, if any (e.g. google.com).
• Device type — desktop, mobile, or tablet, derived from your user-agent string.
• Browser name — e.g. Chrome, Safari, Firefox.
• Anonymised IP hash — your IP address is hashed with SHA-256 and we store only the first 16 characters of that hash. The raw IP is never written to disk.
• Session ID — a random identifier stored in sessionStorage (see below).

That is the complete list. Nothing else is collected.

What we do not collect

• Your name, email address, or any contact details (unless you submit our contact form — in which case only what you type is stored).
• Payment information of any kind.
• Precise location data.
• Tracking cookies. We do not set any cookies for analytics or advertising purposes.
• Cross-site tracking identifiers.
• Any data from third-party analytics scripts — there are none loaded on this site.

Session ID and sessionStorage

The session ID is a randomly generated string created when you open the site and stored in your browser's sessionStorage. This is different to a cookie in one important way: it is deleted automatically when you close the tab. It does not persist between browser sessions, cannot be read by other sites, and is never synced or shared.

Its only purpose is to group page views within a single visit so we can understand navigation flows (e.g. homepage → services → contact). We have no way to link a session ID to any individual person.

Data retention

Raw analytics events are kept for 90 days, after which they are automatically deleted. Aggregated summaries (total page views, top referrers, etc.) may be retained for longer as they contain no event-level or identifiable data.

Where data is stored

All analytics data is stored on UK-based infrastructure. We do not use any third-party analytics platforms (no Google Analytics, no Meta Pixel, no similar services). Your data is never sold, shared, or transferred to any third party.

Legal basis under UK GDPR

Our lawful basis for processing analytics data is legitimate interests (Article 6(1)(f) UK GDPR). We have a genuine business interest in understanding how our website is used so we can improve it. Given the minimal, anonymised nature of what we collect, we consider this processing proportionate and unlikely to override your privacy rights.

You have the following rights:

• Right to erasure — you may request deletion of any data associated with your session.
• Right to object — you may object to processing at any time.
• Right of access — you may ask what data (if any) we hold that can be linked to you.

Because the IP hash is truncated and the session ID is random, we may not be able to identify records belonging to you with certainty — but we will make reasonable efforts to comply with any request. To exercise any of these rights, email us at hello@evanssolutionsltd.co.uk.

Contact

Questions or concerns about this policy? Get in touch: hello@evanssolutionsltd.co.uk. We aim to respond within two business days.