Privacy notice
Last updated: 16 October 2026
Who is responsible
Christian Burkardt, trading as Steadycroft, Oklahomastraße 25, 66482 Zweibrücken, Germany. Email: chris@steadycroft.com. This notice covers the UK GDPR and the EU GDPR.
If we emailed you
Where your address came from. The public register of the Charity Commission for England and Wales: the charity's name and number, its published contact address and its published income figures. We do not buy lists and do not use data brokers.
Why we may write. We write to organisations, not to private individuals, about a service related to their published activity. Our legal basis is legitimate interest (Article 6(1)(f) UK GDPR). Under the Privacy and Electronic Communications Regulations, emails to corporate subscribers do not need prior consent; every email we send says who we are and how to stop further messages.
Stopping it. Reply with “STOP” and you will not hear from us again. You can object at any time; no reason is needed.
What we keep. The address, the organisation's name and the dates of our messages — for up to two years after the last contact, then they are deleted. If you ask us to stop, we keep only the address on a suppression list, so that no further message is sent.
If you are a client
Roles. For the documents you send us, you are the controller and we are your processor. We act only on your written instructions, for one purpose: preparing your report packs. We can sign your own data processing agreement (Article 28 UK GDPR).
What we process. The documents you send: grant agreements or contracts, approved budgets, figures for the period and any annexes, plus our correspondence with you.
Who has access. One person, Christian Burkardt, and the service providers listed below. No subcontracted writers.
Deletion. We delete or return your documents and our working files within 30 days of the work ending, or sooner if you ask. Invoices are kept as long as tax law requires.
Service providers
| Provider | What for | Where |
|---|---|---|
| Zoho Corporation B.V. | EU data centres | |
| Hetzner Online GmbH | Server where documents are processed and stored | Nuremberg, Germany |
| AI model providers | Reading documents and drafting the pack, which is then checked by hand. Only providers whose terms exclude training on your data are used; the current list is available on request. | United States and EU |
| Telegram | Internal notifications about new emails, so they are answered promptly | see Telegram's privacy policy |
| Cloudflare, Inc. | Hosting this website and our domain | global network |
Some providers are outside the UK and the EU. Which safeguards apply to each of them is available on request.
This website
This site sets no cookies, uses no analytics and loads nothing from other websites. Cloudflare, which hosts it, processes connection data such as IP addresses to deliver the pages and protect the site from abuse.
What we never do
- Sell, rent or publish personal data.
- Make automated decisions about people.
- Give legal, tax or financial advice.
Your rights
You can ask for access, correction, deletion, restriction or portability of your data, and you can object to its use. Write to chris@steadycroft.com; you get an answer within one month. You may also complain to a supervisory authority — in the UK the Information Commissioner's Office, in Germany the data protection authority of Rhineland-Palatinate (LfDI Rheinland-Pfalz).