Privacy policy

This privacy policy explains what personal information I collect when you use this website or get in touch, why I collect it, and what your rights are.

Who I am

This website is run by Salted Studio, a one-person web design and development studio based in Somerset. I'm responsible for the personal information described in this policy (the "data controller"). You can contact me about anything in this policy at [email protected]. Salted Studio is the trading name of Arron Rees, based in Somerset.

What I collect and why

When you use the contact form

When you send an enquiry, I collect:

• your name and email address
• your phone number, if you give it
• your budget range and message

I use this to reply to your enquiry and, if you'd like, to prepare a quote. My lawful basis is taking steps at your request before entering into a contract, and my legitimate interest in responding to people who contact me.

The form is protected by Cloudflare Turnstile, which checks that a real person is sending it. To do this, Cloudflare processes technical information such as your IP address and browser details. My lawful basis is my legitimate interest in keeping the form free from spam.

When you email me

If you email me directly, I'll have your email address and anything you include in your message. I use this to reply and, if we work together, to manage the project.

When you browse the website

I use Google Analytics to understand how people use this website, such as which pages are visited, roughly where visitors are and what devices they use. This helps me improve the site. Google Analytics uses cookies, so I only use it with your consent. You can find out more in the cookie policy.

How long I keep your information

I keep enquiries for as long as I need to respond to them, and for up to two years afterwards in case you get back in touch. If we go on to work together, I keep project and billing records for as long as I need to for accounting and legal reasons, which is usually six years.

Who I share it with

I don't sell your information or share it for marketing. I use a small number of trusted services to run this website and my business, and they process information on my behalf:

• my website hosting provider, which stores this website and its data
• my email provider, which handles enquiries sent to me
• Google, for website analytics
• Cloudflare, for spam protection on the contact form

Some of these services may process information outside the UK. Where they do, they're required to protect it with appropriate safeguards under UK data protection law.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information I hold about you
• ask me to correct information that's wrong or incomplete
• ask me to delete your information
• ask me to restrict or stop using your information
• object to me using your information based on legitimate interests
• withdraw your consent at any time, where I rely on it

To use any of these rights, email me at [email protected]. I'll respond within one month.

If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. I'd appreciate the chance to put things right first, so please get in touch with me before contacting the ICO.

Changes to this policy

I may update this policy from time to time. The date at the bottom of the page shows when it was last changed.