Privacy notice

Updated 26 October 2026

This notice explains what happens to personal information on Grid Guardian’s public page and its Send us a site form.

Grid Guardian is run by Ahmed Mohamed Nur, a sole trader trading as Grid Guardian (“we”). We decide how your information is used, so we are responsible for it under UK data protection law.

Send us a site

What we collect

What you type into the form: where the site is, what it is for, its size, where you are with the grid, your deadline and your questions. We also collect your email address so we can reply, and your name and organisation if you give them. If you send a site from the site screen, the request includes that point’s grid reference and coordinates.

Why we use it, and the law that allows it

To reply to your request and tell you the price. You asked us to, as a first step before any work, so the lawful basis is contract (UK GDPR Article 6(1)(b)).
If you go ahead, to do the work. Also contract (Article 6(1)(b)). We keep business records because tax law requires it (legal obligation, Article 6(1)(c)).
To keep your request for up to 12 months after we last spoke, so that if you come back we can pick it up without asking you to start again. The basis is our legitimate interests (Article 6(1)(f)): keeping a short record of enquiries. You can object to this at any time (see below).

We do not use your details for marketing, add you to a mailing list, sell them, or share them with anyone beyond the services named below.

Who handles it for us

Cloudflare runs the Grid Guardian server that receives the form. It passes your request on and keeps no copy. It uses your IP address briefly to limit how many requests one connection can send.
Resend delivers your request to our inbox as an email. Resend keeps the email and its delivery record for 30 days.
Google provides our email account (Gmail), where your request is kept for the periods below.

All three are US companies and may process your information in the United States. Each states that it is certified to the UK Extension to the EU-US Data Privacy Framework, which UK law treats as giving adequate protection for transfers to certified US companies. Resend’s data processing terms also include the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

A request that does not lead to work: deleted 12 months after we last spoke.
If you become a client: kept while we work together. Business records are kept for at least 5 years after the 31 January submission deadline of the tax year they relate to, as HMRC requires.
Resend’s copy: 30 days.

Do you have to give it?

Only the site’s location, what it is for and your email address are needed: without them we cannot reply. Everything else is optional. If you would rather not use the form, email us instead.

Automated decisions

None. A person reads every request and decides how to answer it.

Using the Grid Guardian page

There are no accounts, no analytics, and no advertising or tracking cookies.
Your browser keeps your settings and your work on your device, such as the theme, your watchlist and your notes, and one cookie that remembers whether the side menu is open. None of this is sent to us, and you can clear it in your browser’s settings.
The page reads public data. Some comes through the Grid Guardian server on Cloudflare, and some straight from publishers such as NESO and Elexon. Like any website, those servers see your IP address when your browser asks them for data.
When you screen a site, only a postcode is sent to postcodes.io to find it, and only the point’s coordinates are sent to Planning Data (planning.data.gov.uk) to read planning designations.
The page is hosted on GitHub Pages, so GitHub sees your IP address when it serves the page.
Grid Guardian’s API and MCP server keep nothing a caller sends.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to limit how we use it, or to receive it in a form you can take elsewhere. Email ahmednur719@gmail.com. We reply within one month.

Your right to object. You can object at any time to us keeping your request on the basis of our legitimate interests. Tell us and we will delete it.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, helpline 0303 123 1113 (Monday to Friday, 9am to 5pm), or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the chance to put it right first.

Changes

If any of this changes, we will update this notice and the date at the top.

Grid Guardian provides independent research and evidence-management functionality. It is not affiliated with, endorsed by or operated by NESO, a DNO, Ofgem or any project developer.