What happens to your information

Last updated 25 September 2026. This page covers the pages, the chat assistant, the job bot and verified search. On the preview it also covers acorn-preview-v4.pages.dev.

Who I am

Acorn Labs is run by me, Chris Rothwell. I'm the controller for the information this site handles. I don't have a data protection officer. To ask about your information, have something deleted or make a complaint, message me on LINE @908zliti or LinkedIn.

Just visiting

• The site is hosted on Cloudflare. Like any web host, Cloudflare handles your IP address and basic request details to deliver and protect the site.
• Fonts load from Google Fonts, so your browser contacts Google.
• I don't use cookies, analytics, ad pixels or tracking. The only thing stored in your browser is your search access code, if you use search (see below). It's needed for the service you asked for.
• Links to LINE, Messenger, LinkedIn and X take you to their sites, and their own privacy rules apply there.

The chat assistant

• It answers questions about Acorn Labs and Holdfast from a fixed fact sheet. It can't book, sell or take your details.
• Your message and the last few lines of the conversation go through Cloudflare to my computer, then to xAI (Grok, based in the US) to write the reply.
• My copy of the conversation is deleted automatically within 24 hours. xAI may keep its own copy for longer under its terms.
• Don't type names, contact details, health, money or anything private. If you want to talk to me, use LINE.

The job bot

The page at /job/ is a different bot. It is an AI. It follows a fixed script: the opening question, what the job is, how often it happens, what has to be checked first, what must never happen without you, whether you want Chris to look, and how I should reply.

• The note is only those answers, and only what the job needs. Guest messages are not stored. The note is not used for training. Don't send card numbers, passwords, or your customers' details.
• In this version your answers are not sent to Google. If a paid Gemini key is switched on, Google (Gemini, United States) may only rewrite the wording of the next fixed question.
• I reply myself. The bot cannot agree a price or start the work.
• Cloudflare holds the note, and a copy is written on my computer so I can read it. The copy is the answers you typed. Ask me on LINE @908zliti if you want the note deleted.

Verified search

What it's for: checking public facts from public sources, such as what a law, product or company page says. Every claim is checked against the page it came from. It's private and needs an access code from me.

What it's not for: looking up private people, or anything about your health, money, legal problems or other private matters. It doesn't give advice.

• Your question goes to xAI (Grok, US), which searches the public web. The pages it cites are re-opened to check the quotes, and a separate check (Grok, or Claude by Anthropic, US, as a backup) judges each claim.
• Your question, the pages that were checked and your report are stored on my computer and deleted automatically 24 hours after the report is made. Download your copy before then. The AI providers may keep their own copy for longer under their terms.
• Search is for adults only, and access codes are only given to adults.
• The report is research. No decision about you is made by it.
• Your access code is saved in your own browser so you don't have to retype it. You can clear it by clearing this site's data in your browser.

Why I handle it

To give you what you asked for (the chat reply, the job-bot note, or the search report), and to keep the site working and secure. Using them is optional. The assistant and search need an AI provider. The job bot, in this version, does not send your answers to one. The legal basis is providing the service you asked for, and my legitimate interest in keeping the site secure. I don't sell your information or use it for marketing. Once a job-bot note is actually stored, it stays until the quote is finished or you ask me to delete it. It is not on the 24-hour timer used by the assistant and search. On this preview that store is not connected, so there is no file to keep.

Who receives it and where

• xAI (Grok), United States: chat replies and search research. Not the job bot.
• Google (Gemini), United States: only the wording of the job bot's next question, and only if that paid key is switched on. Not your answers, in this version.
• Anthropic (Claude), United States or Ireland: backup check for search, only if Grok's check fails.
• Cloudflare, worldwide: hosting and security.
• Google, worldwide: website fonts.

So your information may be handled outside the UK. Each provider handles it under its own terms.

Your rights

You can ask what I hold about you, and ask me to correct it, delete it, limit how it's used, give you a copy, or stop using it. Because my copy is deleted within 24 hours, there's often nothing left to find. If you complain to me, I'll acknowledge it within 30 days, look into it and tell you the outcome. You can also complain to the regulator: in the UK, the Information Commissioner's Office; in the EU, your local data protection authority; in Thailand, the Personal Data Protection Committee.

Children

This site is for businesses and adults. Please don't use the chat, the job bot or search if you're under 18.

Changes

If this changes, I'll update this page and the date at the top.