Privacy policy.
The short version: this website collects almost nothing about you. There’s no advertising and no third-party tracking. There’s one contact form that comes straight to my inbox, and standard server logs that every website keeps. That’s it. Below is the longer version, in plain English.
Who I am.
This site is run by Norwich Website Design Ltd, a company registered in England (company number 17355394), registered office 21 Cranleigh Rise, Eaton, Norwich, NR4 6PQ. For anything about your data, email hello@norwichwebsite.design. I’m the data controller, which means I’m the person responsible for it.
If you use the contact form, or email me.
I get your name, your email address, the optional website address if you give it, and whatever you write in the message. The form emails it straight to my inbox, and also saves a copy in this website’s own database so that nothing gets lost if an email goes astray. It does not record your IP address. I use it to reply to you, and to do the work if you become a client. The lawful basis is my legitimate interest in answering enquiries, and, once you’re a client, performing our contract. I don’t add you to a mailing list and I don’t sell or pass your details to anyone to market to you.
How long I keep it.
The copy saved on the website is deleted automatically after 180 days. Enquiries that don’t turn into work get cleared out of my inbox periodically too. Client correspondence I keep for as long as I’m working with you, and for a reasonable period afterwards, because tax and the occasional dispute both have long memories.
Hosting and server logs.
The site runs on managed hosting. Like every web server, it keeps standard access logs, which include IP addresses, for security and diagnostics. I don’t use those to build a picture of you, and they age out. My hosting and email are provided by third parties who process this data on my behalf under their own agreements; some of them operate servers outside the UK, and where that happens it’s covered by appropriate safeguards.
[Ash to confirm: the final processor list — host, email, form provider — before launch.]
Cookies and analytics.
This site sets no cookies of its own and runs no analytics, which is why you weren’t asked to accept anything when you arrived.
[Ash to confirm: replace this paragraph the moment analytics or Complianz go live — it must describe what is actually true at launch.]
Your rights.
Under UK GDPR you can ask me what I hold about you, ask me to correct it, or ask me to delete it. Email me and I’ll do it. There’s no process and no form: it’s one person and a mailbox. If you think I’ve handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.
Anything here you want explained?
Email me and I’ll talk you through it in plain English.
