Privacy

Privacy Policy.

How Port Phones collects, uses, and protects your personal data when you visit this website or enquire about our services. Written plainly. If anything is unclear, email support@portphones.co.uk.

Last updated: 13 May 2026.

Who we are.

Port Phones is a trading name of Andrew Morris, a sole trader based at 31-33 Commercial Road, Poole, Dorset BH14 0HU, United Kingdom, providing managed business phone services. For the purposes of UK data protection law, Andrew Morris is the data controller for any personal data you provide through this website.

Contact: support@portphones.co.uk.

What personal data we collect.

We only collect the information you voluntarily provide when you submit the contact form:

  • Your name
  • Business name
  • Email address
  • Phone number (optional)
  • Approximate size of your business
  • Any message you choose to include

We do not use cookies, tracking pixels, or analytics on this website. We do not collect browsing behaviour. There is no third-party JavaScript loaded on these pages.

Why we collect it.

We use the information you submit for one purpose: to contact you about the audit or quote you requested. We will not use your data for marketing unrelated products, we will not sell it to anyone, and we will not share it with third parties except the service providers listed below.

Lawful basis.

The lawful basis under UK GDPR is legitimate interest — for inbound enquiries, responding to a business enquiry you initiated; for outbound B2B emails, contacting limited companies and similar corporate subscribers about services that may be relevant to their business (see If you received a cold outreach email from us below). Any future consumer marketing or newsletter activity would rely on consent and require opt-in first.

How long we keep it.

We keep enquiry data for up to 24 months so we can respond to follow-up questions. If you ask us to delete your data sooner, we will do so within 30 days. Once you become a customer, your contact details are retained for the duration of our service agreement plus 6 years for tax and legal reasons (a UK statutory requirement).

Who we share it with.

To run the website and respond to you, limited data is processed by:

  • Google Workspace (United States / EU) — our email infrastructure, used to send and receive messages.
  • DigitalOcean (United States / EU / UK) — our hosting, DNS, and backup storage provider. The contact form on this site posts to a DigitalOcean Function (London region) which forwards the submission to our inbox via Google Workspace. Backups of our prospect database are encrypted and held in DigitalOcean Spaces, London region, for UK / EEA data residency.

Both operate under appropriate safeguards for international data transfers (UK Addendum to the EU Standard Contractual Clauses or equivalent). We do not use any third-party form-relay services like Formspree, Typeform, or HubSpot — the form delivery runs on our own infrastructure.

If you received a cold outreach email from us.

If we emailed you about Port Phones without you contacting us first, here is how that works.

We process a small set of business contact details: your company name, a publicly listed business email (typically info@, enquiries@ or similar), your town, your website, and any notes we make from public information. We do not hold personal email addresses or named individual contact details. We obtain this data from the Companies House public register and from your company's own website.

The lawful basis is legitimate interest under UK GDPR. The Privacy and Electronic Communications Regulations 2003 (PECR) do not require prior consent for B2B email to corporate subscribers (limited companies, LLPs, partnerships and public bodies), provided every message offers a clear opt-out. Every email we send includes one.

The sub-processors involved are Google Workspace (sending the email) and DigitalOcean Spaces in London (encrypted backup of our prospect database).

If you ask us to stop — by replying with the word unsubscribe or any other clear request — we add you to a permanent suppression list and will not contact you again. The suppression list is the only record we keep of you; all other data about your firm is deleted within 30 days. If you do not reply, your data is deleted automatically after 6 months.

You have the same rights set out below as any other person whose data we process.

Your rights.

Under UK GDPR you have the right to:

  • Ask for a copy of the data we hold about you
  • Ask us to correct anything that is inaccurate
  • Ask us to delete your data
  • Ask us to stop processing your data
  • Withdraw any consent you have given
  • Complain to the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data

To exercise any of these rights, email support@portphones.co.uk. We will respond within 30 days.

Security.

Your data is transmitted over HTTPS (TLS 1.2 or later), stored on reputable cloud providers with encryption at rest, and accessible only to Andrew Morris. The Gmail OAuth credentials used to send your enquiry into the inbox are stored as encrypted environment variables on DigitalOcean's serverless platform, not in this site's source code. We do not print or store your contact details on paper.

Changes to this policy.

If we update this policy we will update the “Last updated” date at the top. Material changes will be communicated to active customers by email. The full version history lives in the public git repository for this site.