What this site puts on your device
Nothing. There is no cookie, no local storage, no session storage and no identifier of any kind. There is no analytics script, no tag manager, no pixel, no embedded video, no map frame and no social widget. Nothing on these pages counts a visit or records that one happened.
The two arithmetic sheets — the arrangement sheet on the front page and the notice sheet under changes — run inside the page. What you type into them is not sent anywhere, is not kept between visits and is gone when the tab closes. Neither has a submit button that goes anywhere, because there is nowhere for it to go.
What this site requests from elsewhere
One stylesheet, from Google’s font service, which supplies the two typefaces these pages are set in. Loading it means your browser makes a request to fonts.googleapis.com and then to fonts.gstatic.com, and those servers can see the address your request came from, the page that asked for it and what your browser calls itself. That is a real disclosure to a third party and it is stated here because it is the only one.
Nothing else is fetched from another host. The pages, the stylesheet, the script and the drawings are all served from this domain, and the drawings are written into the pages as instructions rather than loaded as images.
What the office holds, and the reason
For somebody who has an appointment or has asked for one, the office holds the written address the enquiry came from, the dates and start times offered, confirmed or released, the length in minutes, which room, the notice period for each booking, the hour each message arrived, and any access arrangement in the words it was agreed in.
The reason is the diary. An hour cannot be held for one person without a record of who it is held for and what was agreed, and an arrangement that is not written down cannot be honoured or checked. That is the whole reason; there is no secondary use, no profiling and nothing passed to anybody for any purpose. The fields are listed one by one under what is written down.
How long, and then what
A file is kept for six years from the end of the calendar year containing its last booking, then deleted: paper destroyed, entry removed. The company’s own accounting record outlives it, as the law requires, and shows that a booking was invoiced on a date without naming anybody.
A message that arrives carrying more than the arrangement is not filed. The arrangement in it is entered, the date of arrival is entered, and the message itself is deleted.
A copy, a correction, deletion
Write from the address on the file. The office answers within one calendar month, to that address, and asks nothing in return. A copy is every line held, in order, with the date each was written. A correction is added as a further line naming what was corrected, because no line is overwritten.
Deletion before the six years are up is done where there is no booking still to come and nothing outstanding. Where a booking is still in the diary the office says what it has to keep until the date passes and deletes the rest, rather than refusing the request as a whole. The accounting record cannot be deleted on request; it names nobody.
Each of those requests is itself entered as a line: the date it arrived and the date it was answered. The procedure is described from the other side under confidentiality.
If the answer is unsatisfactory
Write to the office again and say so; a complaint about how records are held is answered in writing by the office before anything else. If that answer does not settle it, the Information Commissioner’s Office is the United Kingdom body that considers complaints about the way personal records are handled, and a complaint may be made to it directly. The office will not ask you to come back to it first.
This page describes what this site and this office actually do. Where something here is wrong or has fallen out of date, the error is the company’s and writing to say so is welcome.