Information received from you
The general enquiry form may collect your name, organisation, email address, telephone number, service area and message. The proposal and RFP form may collect the same contact information, a proposal title, covering message and the files you select.
Please avoid including passwords, banking credentials or unnecessary sensitive information in an initial enquiry.
How submissions are processed
Form submissions are sent to a separate Cloudflare Worker, which validates the form, performs the security check and coordinates delivery. Internal notifications are delivered only to info@alexanderjohnsonco.com. Resend is used to deliver the internal notification and an acknowledgement to the email address you provide. Your address is used as the reply-to address, not as the sender of the firm’s notification.
The firm may use the information to understand and respond to your enquiry, direct it to an appropriate team member, consider whether it can assist, communicate with you and maintain suitable business records. If an engagement begins, relevant engagement terms and professional processes may also apply.
Proposal files and private storage
Proposal and RFP files are stored in a private Cloudflare R2 bucket configured for the EU jurisdiction. The files are not public and are not attached to notification emails. The internal notification contains signed links that expire after seven days.
The R2 bucket has a 90-day automatic deletion lifecycle for stored objects. File-format and size checks reduce accidental or unsupported uploads, but they are not malware scanning and do not establish that a file is safe.
Retention of email and business records
The 90-day R2 lifecycle applies to proposal files in R2; it does not automatically delete emails from the firm’s mailbox. Enquiry, acknowledgement, engagement and other business records may be held for as long as reasonably needed to respond, maintain appropriate records, meet applicable legal or professional responsibilities, or resolve an issue. The appropriate period depends on the context.
Security
The firm takes reasonable organisational and technical measures intended to protect information in its care. No email, communication method or storage system can be guaranteed to be completely secure.
Turnstile
Cloudflare Turnstile is required on both forms to help distinguish human submissions from automated spam. Cloudflare processes the security token and associated technical request information for that purpose. A failed, expired or reused security token prevents the form from being accepted.
Analytics and your choice
Necessary browser storage records the version and value of your analytics choice. Analytics is optional. Google Tag Manager is not loaded by this website until you select Accept Analytics or enable analytics in Manage Preferences. Advertising-related consent remains denied.
Where the Google Tag Manager container and its Google Analytics 4 tag have been configured and published, approved non-personal events may describe actions such as starting or completing a form or selecting a telephone or email link. Names, email addresses, telephone numbers, organisations, messages, proposal titles, filenames and file identifiers are not included in application- triggered analytics events.
You can reject analytics initially or reopen Cookie preferences in the footer at any time. Withdrawing consent immediately denies analytics, stops future website-triggered analytics events and removes accessible Google Analytics cookies for this website. The versioned choice expires after 180 days or can be cleared sooner in browser settings. See the cookie notice for the exact storage names and durations.
Third-party links
The website may link to a map service or another third-party website. Those services operate under their own terms and privacy notices. Alexander Johnson & Co does not control their websites or data practices.
Questions about your information
You may contact the firm to ask about personal information you have provided, request a correction or update, or raise a concern. What can be done may depend on applicable legal, professional and record-keeping responsibilities.
Email info@alexanderjohnsonco.com and include enough information for the firm to identify your enquiry.