Privacy

Who is responsible

I am David Hughes, the individual responsible for this website and the personal information described here. I use the trading name David Hughes Design & Development. Contact me at hello@davidhughes.co about your information or this notice.

When you contact me

The enquiry form collects your name, email address and message. If you email me, I receive the details you choose to include. I use these to respond and for related follow-up. Please avoid sending sensitive personal information that is not needed for your enquiry.

The "Where to start" questionnaire keeps your selections and generated advice in your browser. If you choose to send your challenge, I receive only your edited challenge description, name, email address and optional organisation. Your question selections and generated advice are not included in the submission. The same enquiry purposes and retention arrangements below apply.

Netlify processes and stores form submissions and sends a notification to my Zoho Mail inbox. I read enquiries personally; the mailbox does not forward them elsewhere. I do not automatically add you to a marketing list.

Booking a conversation

Booking links open Cal.com, outside this website. Cal.com handles the booking details you provide, and Zoho Calendar manages my appointments. Calls use Cal Video and its video infrastructure providers. These services process the information needed to arrange and provide the conversation. Their own privacy information also applies when you visit their services.

This website does not embed the booking calendar or send your enquiry to Cal.com. See Cal.com's privacy information (opens in a new tab).

Website use, security and analytics

Netlify hosts this website and processes technical request information, such as IP addresses, requested pages and browser information, to deliver and protect it. I use Netlify Web Analytics to understand overall usage, including popular pages, referring sources, approximate locations and visitor counts derived from IP addresses.

Web Analytics uses Netlify's server logs, not a tracking script or analytics cookies in your browser. This website does not use advertising trackers or set optional analytics cookies. Following external links takes you to services with their own cookie and privacy practices.

Why I can use this information

For general enquiries and related follow-up, I rely on my legitimate interest in responding to people who contact my business. When you ask me to take steps towards a contract, I use the information needed for those requested pre-contract steps.

I also rely on legitimate interests in operating a secure website and understanding aggregate usage to improve it. I consider these purposes against your privacy rights and limit the information I use to what is needed. Sending an enquiry is not blanket consent to other uses of your information.

How long I keep it

For enquiries that do not become an engagement, I delete the enquiry records and email copies six months after our last substantive contact. I review these monthly, including Netlify submissions and Zoho Mail notifications and correspondence.

If we work together, relevant records are handled under the arrangements for that engagement. I may need to keep particular records longer to meet legal obligations or deal with a legal claim. Hosting, security logs and analytics have separate provider-managed retention; the analytics chart history is not a promise about how long all underlying logs exist.

Service providers and international processing

I use Netlify for hosting, Forms and Web Analytics, Zoho for email and calendar, and Cal.com and its service providers for bookings and video calls. Information may be processed outside the UK, including by their support teams and subprocessors. Where required, international processing needs appropriate safeguards under UK data protection law, such as approved contractual terms.

You can contact me for details of the safeguards relevant to your information. Further provider information is available from Netlify (opens in a new tab) and Zoho (opens in a new tab). I do not sell your personal information.

Your rights

Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, object to processing based on legitimate interests, or receive a portable copy where that right applies. Email hello@davidhughes.co to ask a question or exercise your rights.

You can also complain to the Information Commissioner's Office (opens in a new tab), the UK data protection regulator.

Changes to this notice

I may update this notice as the website or services change. The date above shows when it was last updated.