Privacy.
Website Studio is a trading name of Sam Hume. I decide what happens to the personal information below, so I am its data controller. You can reach me at [email protected].
What I collect
Through the enquiry form: your name, business name, email address, website or social media links, and anything you tell me about your business. I use it to reply and to put your designs together.
Through the sign-up form, if you become a client: your business name, the email address and phone number for your website, and anything you tell me about your business. I use it to build your site and to bill you.
Both forms record your IP address, and the enquiry form also records your browser type, so I can spot misuse.
I sometimes email businesses at the contact address they publish. Reply “no thanks” and I won’t contact you again.
The lawful bases are legitimate interests (replying to enquiries, keeping the forms safe and contacting businesses), contract (client work) and legal obligation (tax records).
Payments
GoCardless collect your bank details and take the Direct Debit. I see your name, email address and whether each payment went through, but not your full bank details. Their payment page links to their own privacy notice.
Who else sees it
These companies handle it for me: Cloudflare (hosting, form storage, the spam check and visitor counts), Resend (form emails), Apple iCloud (my email), GoCardless (payments) and Dropbox (photos, if you send any). My accountant sees client billing records.
The spam check on the enquiry form is Cloudflare Turnstile. It runs in the background without asking you to do anything, and Cloudflare’s Turnstile privacy addendum explains what it collects.
Some of them are based outside the UK, mainly in the US. Where your information leaves the UK, it is protected by the safeguards UK law requires.
How long I keep it
I delete enquiries within 24 months. If you become a client, I keep your records while I work for you and for six years after, for tax.
Cookies and analytics
This site uses no tracking or advertising cookies. Cloudflare Web Analytics counts visits without cookies.
Your rights
You can ask to see, correct, delete, restrict or move your information, or object to how I use it, including my emails. Email [email protected].
Complaints
Please tell me first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.