This site is operated by MAXFR ("we", "us"), based in London, United Kingdom. We keep data handling deliberately minimal.
Enquiries. If you email us or use the contact form, we receive what you send — typically your name, email address, company and message. We use it solely to respond to and manage your enquiry and any engagement that follows.
Diagnostic answers. The Board Advisory Diagnostic runs entirely in your browser; answers are not transmitted to us unless you choose to email your result, in which case they form part of your enquiry.
Analytics. We use privacy-focused, cookie-free analytics (Cloudflare Web Analytics) to understand aggregate site usage. It does not track you across sites or build individual profiles.
We process enquiry data under legitimate interests (responding to you) and, where an engagement follows, contract. Enquiry correspondence is retained while relevant and then deleted; engagement records are kept as required for legal and accounting purposes.
We do not sell personal data. Service providers that process data on our behalf (email hosting, form delivery) do so under their own compliance terms.
Under UK GDPR you may request access to, correction of, or deletion of your personal data, and may object to or restrict processing. Contact i@maxfr.co. You may also complain to the ICO (ico.org.uk).
Material changes to this policy will be posted on this page with an updated date.