Privacy & Cookies.

1. Who we are

This website is operated by Marcus Druen Ltd ("Challenger House", "we", "us"), the data controller. Company Registration No. 09276153. VAT Registration No. 205099618. Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. For any privacy question or to exercise your rights, contact hello@marcusdruen.com.

2. The short version

This is a simple, mostly static website. We do not run advertising, we do not profile you, and we do not sell your data. The site sets no marketing or analytics cookies. The only third parties involved in a normal visit are our website host and the service that delivers our fonts.

3. What we collect, and why

• Server and security logs. Our host, Netlify, automatically processes technical data such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. Legal basis: our legitimate interests in operating and protecting the site.
• Fonts. We load typefaces from Google Fonts. This means your IP address is disclosed to Google LLC (United States) when the fonts load. Legal basis: your consent, and our legitimate interest in presenting the site as designed. You can decline non-essential processing in the banner.
• Enquiries. If you email us, or book a call through Calendly, we process the details you provide in order to respond and to take steps at your request before entering a contract. Bookings are handled by Calendly under its own privacy notice.

We do not currently use analytics, tracking pixels or advertising tools. If that changes, we will update this notice and ask for your consent first.

4. Cookies and similar technologies

We do not set any non-essential cookies. To remember your choice in the consent banner, we store a single value in your browser's local storage on this device. It contains only your preference, is not shared with anyone, and you can clear it at any time in your browser settings. Should we ever add analytics or other non-essential technologies, they will load only if you accept them.

5. International transfers

Some providers are based outside the UK and EEA, notably Google (fonts) and our host. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision.

6. How long we keep it

Technical logs are retained by our host for a limited period for security and diagnostics. Correspondence and booking details are kept only as long as needed to deal with your enquiry and to meet our legal and accounting obligations, then deleted.

7. Your rights

Under the UK GDPR and the EU GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@marcusdruen.com. We will respond within one month.

8. Complaints

If you are in the UK and are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). If you are in the EU, you may complain to your local data protection supervisory authority. We would appreciate the chance to resolve it with you first.

9. Changes

We may update this notice from time to time. The date at the top shows when it last changed.