Herts Web Design
Vol. 01 Hertfordshire · MMXXVI
Notice

Privacy.

What happens to the details you send me, in plain English. The short version: I use them to reply to you, and for nothing else.

In short
WhatYour requestThe fields you fill in on the scope request form.
WhyTo replyAnswering your request, and nothing else.
WhereNetlify, then emailThe form goes through Netlify, which hosts this site, to my inbox.
How longOnly while neededCleared from Netlify once it reaches my email. Deleted within 12 months if we don't work together.
NeverSold or sharedNo marketing, no mailing lists, no tracking, no cookies.

Who I am

Herts Web Design is me, Oscar R.F, a one-person web design studio in Hertfordshire. For the details you send through this site I'm the data controller: I decide how they're used, and I'm responsible for keeping them safe.

You can reach me at oscar@hertswebdesign.co.uk or on 07346 001171.

What I collect

When you send a scope request, I receive:

  • your name and your business name
  • your email address
  • your phone number, if you give it
  • what you think you need, and your timing
  • how you'd like me to reply
  • a note that you ticked the agreement box, and when you sent the form

If you phone, WhatsApp or email me instead, I receive your number or address and whatever you choose to tell me.

This site doesn't use analytics, advertising or tracking of any kind, and it sets no cookies.

What I use it for

Only to reply to you: to answer your request, write your scope and quote, and talk the project through if you decide to go ahead.

I will never sell your details, pass them to anyone for their own marketing, add you to a mailing list, or contact you about anything you didn't ask about.

Why I'm allowed to use it

UK data protection law asks me to name the reason I can use your details. For a scope request, it's to take the steps you've asked for before we might agree to work together (Article 6(1)(b) of the UK GDPR). If you get in touch about something else, it's my legitimate interest in replying to people who contact me (Article 6(1)(f)).

The box you tick on the form confirms you've read this notice and you're happy for your details to be sent to me through Netlify. It doesn't give me permission to use them for anything more than replying.

Who else handles your details

A few services sit between your form and my inbox. Each one handles your details only to provide its service to me.

Netlify
Hosts this website and receives the form when you press send. Your request is stored in my Netlify account until I delete it (see section vii). Netlify filters form submissions for spam automatically, and uses its own sub-processors to run its service, under its data processing agreement. Like any web host, it also records technical details such as your IP address and browser, to deliver pages and keep the site secure. Netlify's privacy statement
Namecheap Private Email
Hosts my email. Netlify sends me a copy of each request by email, and our conversation carries on from there. Namecheap's privacy policy
Google Fonts
The typefaces on this site load from Google's servers, so Google receives your IP address when a page opens. No cookies are set. Google Fonts privacy
WhatsApp
Only if you message me on WhatsApp, or ask me to reply there. WhatsApp's privacy policy

Where it's stored

Most of these services are run by companies based in the United States, so your details may be stored there. Netlify is certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving your data an adequate level of protection. The other services explain the safeguards they use in their own privacy policies, linked above.

The form is sent over an encrypted connection.

How long I keep it

Netlify doesn't delete form submissions on its own: they stay in my account until I remove them. So I set my own limits.

  • In Netlify: once a request has reached my email, I delete it from my Netlify account, along with anything marked as spam. I don't use Netlify to keep enquiries.
  • If we don't work together: I delete your request and our conversation once it's clear the project isn't going ahead, and in any case within 12 months of the last time we spoke.
  • If we do: I keep our correspondence for the length of the project, then only what I need for my business and tax records, for as long as UK law requires.

Your rights

You can ask me to:

  • show you the details I hold about you
  • correct anything that's wrong
  • delete your details
  • stop using them, or limit how I use them
  • give you a copy you can take somewhere else

Email oscar@hertswebdesign.co.uk. It costs nothing, and I'll reply within one month.

If you're unhappy with how I've handled your details, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. I'd appreciate the chance to put things right first.

What you have to tell me

Your name, business, email and what you think you need are required, because I can't reply properly without them. Your phone number and timing are optional.

Nothing about you is decided automatically. A person, me, reads every request.

Changes to this notice

If this notice changes, the new version will appear on this page with a new date.

Last updated