Skip to content
ezyStat

Privacy policy

How personal information is used when you visit this website, make an enquiry or discuss a project with ezyStat.

Last updated:

Who is responsible for your information

ezyStat is the trading name of Dr Arash Ardalan, an independent statistician based in the United Kingdom. Dr Arash Ardalan is the data controller for personal information handled through this website and its enquiry process.

Postal address: 91 Prince Andrew Way, Ascot, Berkshire, SL5 8NH, United Kingdom.

For privacy questions or requests, email [email protected]. Please describe your request without including unnecessary personal or sensitive information.

Information we collect

The enquiry form collects your name, email address, service of interest, project description and expected timeline. Organisation and budget are optional. We also receive any information you choose to include in subsequent emails.

Website hosting and security services process technical information such as IP addresses, browser information, requested pages and security signals to deliver the website and detect abuse. Cloudflare Turnstile checks whether form requests appear to come from a person rather than an automated system.

Please do not submit datasets, information about research participants, health information or other sensitive personal data through the enquiry form. If a project requires data, we agree its scope, lawful handling and a suitable transfer method separately.

Why we use information

We use enquiry details to understand your request, reply, arrange a conversation and prepare a proposal. For prospective individual clients, this may be necessary to take steps at your request before entering into a contract. For enquiries on behalf of an organisation, we rely on our legitimate interest in responding to relevant business enquiries and arranging professional services.

We rely on legitimate interests to protect the website, prevent spam, maintain appropriate business correspondence and address complaints. We may also retain information where necessary to meet legal, tax or accounting obligations.

The form acknowledgement confirms that you have read this notice and want a response. It does not subscribe you to a mailing list. We do not sell enquiry details or use them for advertising profiles. Enquiries are reviewed by a person.

The details marked as required are needed to process an online enquiry. You can contact us by email if you prefer not to use the form.

Services that handle your information

Cloudflare provides website hosting, the enquiry endpoint and Turnstile security verification. Its privacy policy and Turnstile Privacy Addendum explain the technical information it processes, including processing for its own security purposes.

Resend delivers the submitted enquiry as an email. It processes message content, email addresses and delivery records. See its Data Processing Addendum and data protection information.

Microsoft 365 / Outlook provides the business mailbox used to receive and respond to enquiries. See Microsoft’s privacy statement.

Information may also be shared with a professional adviser where necessary to support the business or meet a legal obligation. Additional data handling or fieldwork arrangements for commissioned work are discussed before project data is transferred.

International processing

Our service providers operate internationally and may process information outside the UK. Resend states that message content and delivery data are stored in the United States. Its data processing terms include Standard Contractual Clauses and the UK Addendum for relevant transfers.

Cloudflare and Microsoft describe international processing and applicable transfer safeguards in their data processing terms. These include adequacy arrangements or contractual safeguards where applicable. You can request more information about arrangements relevant to an enquiry by emailing [email protected]. See the Cloudflare DPA, Resend DPA and Microsoft DPA.

How long information is kept

Enquiry correspondence is kept while a discussion is active and for as long afterwards as it is reasonably needed to follow up, record a proposal or deal with a query or complaint. Relevant factors are the enquiry’s status, whether a project proceeds, ongoing correspondence and applicable legal obligations. Information that is no longer needed should be deleted rather than kept indefinitely.

If an enquiry becomes a client engagement, the project agreement explains the handling and retention of project data. Invoices and other business records may need to be retained to meet tax, accounting or legal requirements.

The providers above also retain information under their service terms. Provider retention periods are separate from the period for which correspondence remains in the business mailbox.

Your rights and right to object

Depending on the processing and legal basis, you may request access to your personal information, correction of inaccuracies, erasure or restriction, and data portability where its conditions apply.

You have the right to object to processing based on legitimate interests. To object or exercise another right, email [email protected] and explain your request. We may need information to confirm your identity before disclosing personal information. A request may be limited where another legal obligation requires information to be retained.

You can raise a concern with us or complain to the UK Information Commissioner’s Office.

Security and changes to this notice

The website uses HTTPS and security verification for online enquiries. Email and online communications carry risks, so please keep initial enquiries to a general project description. Confidential research data should be transferred only through a method agreed for that engagement.

This notice will be updated when the website, providers or purposes of processing change. The date at the top of this page identifies the current version.

Questions about this page? Contact [email protected].