The short version
- This website uses no cookies, no analytics and no advertising trackers.
- I only use the details you send me (or that a business publishes itself) to reply, build a demo or work together.
- I never sell or rent your data.
- Ask me to see, correct or delete your data at any time: [email protected]
1. Who I am
Six Hours Ahead is the trading name of Lukas Schaefer (“I”, “me”). I build and look after websites for small businesses. I live and work in Bangkok, Thailand.
I am the controller of the personal data described here. You can reach me at [email protected]. This policy covers the website sixhoursahead.com and the way I handle enquiries and client work.
2. What I collect and why
| When | What data | Why | Legal basis (UK GDPR) | How long I keep it |
|---|---|---|---|---|
| You email me | Name, email address, your business name, anything you write | To reply and, if you ask, build a free demo | Legitimate interests; steps before a contract | Up to 2 years after our last contact |
| You book a call | Name, email, chosen time, any answers you give in the booking form | To hold the call | Steps before a contract | Up to 2 years after our last contact |
| You become a client | Contact and billing details, the content for your website, our messages and change requests | To build and look after your website and invoice you | Contract; legal obligation (tax and accounting) | For the length of our contract, then as long as tax and accounting law requires |
| You visit this website | Technical data your browser sends automatically, such as IP address, browser type and time of visit, logged by the hosting provider | To deliver the site and keep it secure | Legitimate interests | Only as long as the hosting provider keeps its server logs |
You never have to give me personal data. Without an email address, though, I can't reply to you.
3. If I emailed you first
Sometimes I contact businesses by email to offer a free website demo. I only do this to company addresses (for example a limited company's general email), and only where the law allows it.
- What I use: the business name, its publicly listed email address, the name and role of a contact person if the business publishes it, and short notes about the business's current website.
- Where it comes from: the business's own website or social media profiles and the public company register (Companies House in the UK, the CRO in Ireland).
- Why: to offer a service that is relevant to the business. My legal basis is legitimate interests. I have weighed this against your interests and keep it to a minimum.
- How long: if there's no reply, I delete these details within 6 months of my last email.
- Opting out: reply “stop” and I will never email you again. I keep only your email address on a “do not contact” list so that I can make sure of that.
4. Cookies and tracking
This website doesn't set any cookies and doesn't use analytics, tracking pixels or adverts. The fonts are stored on this website itself, so no data is sent to font services such as Google Fonts.
If you click a link to another service (for example to book a call), that service's own privacy policy and cookies apply there.
5. Services I use
Like most small businesses, I use a few trusted providers to run things. They process data on my behalf and only as needed for their service:
- Website hosting, domain and email forwarding: Cloudflare
- Email: Google (Gmail / Google Workspace)
- Client and enquiry records: Notion
- Payments (clients only): Stripe
I don't share your data with anyone else unless the law requires me to.
6. Where your data is
I work from Thailand, and some of the providers above are based in the United States. This means your data is processed outside the UK. Where that happens, I rely on the safeguards UK law provides, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework, where a provider is certified) or the UK International Data Transfer Agreement or Addendum. You can ask me for more detail.
7. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data I hold about you
- have it corrected if it's wrong
- have it deleted
- restrict how I use it
- object to me using it, including for any direct marketing (this always works, no reason needed)
- receive data you gave me in a portable format
Just email [email protected]. It's free, and I'll reply within one month.
8. Complaints
If you're unhappy with how I handle your data, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
9. Changes to this policy
If I change how I use personal data, I'll update this page and the date at the top.