Privacy Notice
How we collect, use and protect your personal data. Written to be read, not to be skimmed past.
1. Who we are
Agnew Digital ("we", "us", "our") is a sole trader business based in Wiltshire, United Kingdom, providing website design, development and related services.
- Data controller: Cameron Agnew, trading as Agnew Digital
- Contact: cameron@agnewdigital.co.uk
- Website: agnewdigital.co.uk
- ICO registration number: ZC222254
We are the "data controller" for the personal data described in this notice, which means we decide how and why it is used.
2. What personal data we collect
We only collect data you actively give us. We do not buy contact lists, and we do not track you across other websites.
| Where | What we collect | Why |
|---|---|---|
| Contact form | Name, business name, email address, your trade, and whatever you write in the message field | To respond to your enquiry and, if you go ahead, to deliver the work |
| Compliance checklist form | Name and email address | To send you the checklist, and, only if you tick the consent box, occasional related emails |
| Direct email | Whatever you include in your message | To reply and keep a record of our correspondence |
| Client project work | Business contact details, billing information, and content you supply for your website | To carry out the contract between us |
Please don't send us sensitive information. Our forms are for business enquiries. Please do not include details about a bereavement, health information, or any other special category data in your message. If you need to share sensitive information as part of a project, we will agree a secure method with you first.
3. Our lawful basis for using your data
Under UK GDPR we must have a lawful basis for processing your personal data. Ours are:
- Legitimate interests: responding to enquiries you send us. Our interest is in running a business and replying to people who contact us; we consider this to have minimal privacy impact since you initiated the contact.
- Contract: where you become a client, we process your data to deliver the work we have agreed and to invoice you.
- Consent: for marketing emails. You give this by ticking the box on our checklist form, and you can withdraw it at any time.
- Legal obligation: we keep financial records for the period required by HMRC.
4. Who we share it with
We do not sell your data, and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our behalf, under written agreements:
- Netlify: hosts this website and processes form submissions
- [EMAIL PROVIDER]: sends our emails and stores our mailing list
- [ACCOUNTING SOFTWARE]: invoicing and financial records
- Our accountant, where relevant to financial records
Some of these providers operate outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards such as UK International Data Transfer Agreements or adequacy regulations.
We may also disclose data where we are legally required to do so.
5. How long we keep it
- Enquiries that don't become projects: up to 12 months, then deleted
- Client records: for the duration of our working relationship, then 6 years for accounting and legal purposes
- Marketing list: until you unsubscribe or ask us to remove you
- Financial records: 6 years, as required by HMRC
6. Cookies and analytics
This website does not use tracking or advertising cookies. We do not run Google Analytics or any similar profiling tool. If this changes, we will update this notice and ask for your consent through a cookie banner before setting any non-essential cookies.
Our web fonts are served by Google Fonts, which may log your IP address as part of delivering those files.
7. Your rights
Under UK data protection law you have the right to:
- Be told how your data is used (this notice)
- Request a copy of the data we hold about you
- Have inaccurate data corrected
- Ask us to delete your data
- Object to or restrict how we use it
- Request your data in a portable format
- Withdraw consent at any time, where consent is our basis
To exercise any of these, email cameron@agnewdigital.co.uk. We will respond within one month, and there is no charge.
8. Complaints
If you are unhappy with how we have handled your data, please tell us first at cameron@agnewdigital.co.uk. We will acknowledge your complaint within 30 days and work to resolve it.
You also have the right to complain directly to the Information Commissioner's Office at any time:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
9. Security
This website is served over HTTPS. We keep our accounts protected with strong, unique passwords and two-factor authentication where available, and we limit access to your data to what is needed to do the work.
10. Data we handle for our clients
When we build or maintain a website for a client, we may have access to personal data belonging to that client's own customers. In those cases the client is the data controller and we act as a data processor under a written agreement. If you are a customer of one of our clients and have a question about your data, please contact that business directly.
11. Changes to this notice
We may update this notice from time to time. The version number and date at the top will always tell you when it last changed.