PRIVACY
Bastionhost asks for as little personal information as possible. This notice explains what happens when you choose to send an enquiry or share an AI First-Check result.
THE SHORT VERSION
Bastionhost is an independent project operated by Kevin Turnbull and is not currently a registered company. The site owner decides how information submitted through this website is used and protected.
When you visit, the site's hosting and security provider processes technical information such as your IP address, requested page, request time, routing information and security signals. If you use the enquiry form, the site also collects your name, email address, optional organisation, enquiry type and message. If you explicitly choose to send an AI First-Check result, its answers and result summary are included too.
Technical information is used to deliver the site, prevent abuse, apply rate limits, investigate faults and maintain security. Enquiry information is used only to understand and respond to your request and manage any continuing conversation. It is not used for unsolicited marketing, advertising or automated decision-making.
Legitimate interests are relied on to deliver and protect the website and to respond to a request you chose to make. Where you ask for voluntary support or continuing collaboration, the information is used to understand that request and agree sensible next steps. Separate permission is requested before AI First-Check answers are transmitted.
All website requests pass through Cloudflare, which provides hosting, delivery and security. Enquiries are then stored in a restricted Microsoft 365 list. Those providers process information on behalf of the project and may use appropriate international transfer safeguards where processing takes place outside the UK.
Enquiry records are normally deleted within 12 months. The hosting and security provider retains different operational and security records according to the service and its applicable settings. Bastionhost does not maintain a separate visitor-analytics database or routine archive of traffic logs. Information may be kept longer where retention is reasonably needed for security, legal or record-keeping purposes.
You can ask what information is held about you, request correction or deletion, restrict or object to its use, and withdraw any permission you have given. You can also complain to the UK Information Commissioner’s Office.
Do not send passwords, payment details, medical information or detailed safeguarding disclosures through the form. Bastionhost is not an emergency safeguarding service. If someone is in immediate danger, contact the emergency services.
The site does not use advertising or marketing cookies. Essential security cookies may be set, and the site remembers when you dismiss the cookie banner. AI First-Check answers remain in your browser unless you actively choose to send them with your contact details. Read the cookie notice for details.
Use the enquiry form to exercise a data-protection right or ask how your information has been handled. Select “Something else” if it is not already chosen.
Contact the person responsible →Independent guidance and complaints: Information Commissioner's Office.
