Privacy notice.
Updated .
I am David Baker, the independent developer behind Dbak91, based in Manchester, United Kingdom. I am responsible for the personal information I use to handle enquiries and provide my services. Contact me at hello@dbak91.co.uk about privacy or your information.
When you contact me
The enquiry form sends the service, website plan where relevant, name, email address and message you enter to an Azure Function. The Function uses Azure Communication Services Email to deliver the enquiry to my Microsoft 365 mailbox at hello@dbak91.co.uk. Your email address is set as the reply address so I can respond. You can email me directly instead. Earlier correspondence sent to my previous Gmail address may still be held by Google.
I receive the contact details, message and delivery metadata you submit. Microsoft and network providers also handle connection data such as your IP address and request time to deliver, secure and monitor the service. Please send only what I need to answer your enquiry. Do not send passwords, card details, health information, customer lists or other sensitive or confidential material through an initial enquiry.
I use this information to answer you, assess the project and, if agreed, deliver and support the work. The lawful basis is taking steps at your request before entering a contract and performing that contract where you are the customer. For business contacts and general enquiries, it is my legitimate interest in responding and managing business communications. I use necessary financial records to meet legal record-keeping obligations. An enquiry does not subscribe you to marketing.
Website visits and providers
Microsoft Azure Static Web Apps hosts this website. Hosting and network services receive technical data such as IP address, requested page, time and browser information to deliver and protect the site. My legitimate interest is operating a reliable and secure website. This site does not add advertising trackers, analytics scripts or third-party embedded media.
Microsoft handles new email enquiries, hosting and the separate AI infrastructure. Google may still hold earlier correspondence. Professional advisers or public authorities may receive necessary records where there is a legal requirement or a need to establish or defend a legal claim. Links to Facebook, GitHub, client websites and other external services take you to services with their own privacy practices.
Where information is processed
Information is not guaranteed to stay in the UK. The static hosting resource is configured in Central US and Azure uses distributed delivery infrastructure. The Azure Function is in UK South, the contact form's Azure Communication Services resource uses the Europe data location, and the Microsoft 365 tenant reports the Exchange Online mailbox's current and committed geography as the United Kingdom. Microsoft may still process limited data elsewhere to provide, secure and support its services. Where an international transfer requires safeguards, Microsoft's Data Protection Addendum provides the applicable contractual protections, including standard contractual clauses and the UK addendum.
Google may process correspondence sent to my earlier consumer Gmail address internationally, under its consumer terms rather than a business data-processing agreement. The AI resource is in UK South, but its GlobalStandard model deployment can process prompts and responses outside the UK. I therefore cannot offer UK-only processing. Do not submit client files, customer data or information requiring a particular processing location through the public contact form or AI chat; contact me before sharing it by another agreed method.
How long information is kept
I keep enquiry correspondence while considering and answering an enquiry. Project correspondence is retained while providing the agreed work and support, and afterwards only as needed for unresolved complaints, legal claims and applicable accounting or tax record-keeping duties. These criteria determine retention; information should not be kept simply because storage is available. Contact me to ask about the retention of a particular record or to request deletion.
The separate Azure Function's Application Insights request and trace tables are currently configured for 90 days. This is a monitoring setting, not a promise that every category of provider-held information is erased after 90 days. Provider logs, backups and Microsoft abuse-monitoring records have separate rules. Their full configuration is still under review.
Browser-only choices and demos
Without optional storage permission, the site carries light/dark and simple/detailed display choices in its internal link URLs as you move between pages; demo activity stays on the current page. With permission, local storage can retain display choices, demo comments, a demo basket and product comparisons in your browser for up to 180 days, checked when the site next loads. These values are not uploaded by the demo code. Other people using your browser may see saved comments. Change your storage choice or clear saved demo data.
AI playground
If you choose to send a message, this website sends that message and earlier messages in your current chat session to an Azure Function and a Microsoft-hosted AI model to generate a reply. Microsoft and network providers also handle connection data such as your IP address and request time. Do not include personal, client, confidential or sensitive information; the chat is for general questions, not a private enquiry service.
I rely on my legitimate interests in offering this optional demonstration and protecting it against misuse. The transcript is held in your browser tab for the session and is cleared on reload; the site code does not save a chat history. Microsoft may separately retain prompts and responses flagged for abuse monitoring and human review. The Function's monitoring records have their own retention setting, described above; I cannot promise that all provider-held information disappears when you close the tab or after 90 days. You can ask about a message you submitted using the contact address above, but please do not repeat its contents in your request unless needed.
Replies are generated automatically and may be inaccurate. The chat does not make decisions about access to my services. Global model processing and the limits of verified international-transfer arrangements are explained above. If you used an earlier live version, contact me about information you submitted there.
Blog
The blog articles are written with the help of the BabyLoveGrowth.ai service. When you open an article, your browser requests it from the site's Azure Function, which fetches the article text from BabyLoveGrowth.ai using a private key; no visitor information is sent to BabyLoveGrowth.ai. Article images are loaded directly from BabyLoveGrowth.ai's media servers (media.babylovegrowth.ai), so that provider receives your IP address and browser information when an image loads. Articles are general information, not advice.
Mobile apps
Apps can have different data flows from this website. The TradePulseETA privacy notice explains what that Android app keeps on the device and what is sent when optional online routing is requested.
Your rights
You can ask for access to your personal information, correction, erasure, restriction and, where applicable, a portable copy. Rights depend on the circumstances and lawful basis; for example, some financial records must be retained.
You can object to processing based on legitimate interests. Email me with your request. You can also withdraw any consent you have given, including permission for optional browser storage, without affecting earlier lawful processing.
Requests are normally free. I will respond without undue delay and normally within one month; the law allows extensions for certain complex or multiple requests. I may need proportionate information to verify identity. You do not have to provide enquiry details, but I may be unable to answer or quote without enough information.
Raise any concern with me using the email above. You can also complain to the Information Commissioner's Office (ICO), the UK data-protection regulator.