Who I am
This website is run by Devon Williams, a sole trader based in the United Kingdom, providing freelance web development and related services.
For anything relating to this policy or your personal data, contact me at [email protected]
The short version
This is a simple website. It has no accounts, no newsletter, and no advertising. If you use the contact form, I receive your message so I can reply to you. The form is handled by a third-party service, Web3Forms, which passes it to my inbox. The detail below sets out the rest as required by UK data protection law.
What personal data I collect, and how
Contact form submissions. When you submit the contact form, you provide your name, email address, and the content of your message, plus anything else you choose to include.
The form is processed by Web3Forms, a form-handling service. Your submission is sent to Web3Forms’ servers, which forward it to my email inbox. Web3Forms acts as a processor on my behalf: they handle the data on my instructions and do not use it for their own purposes.
Web3Forms retains a copy of submissions temporarily (30 days) before automatic deletion. Their servers are located in the United States, and their parent company is based in India. See “Transfers outside the UK” below.
Web3Forms also applies automated spam filtering to submissions, which involves basic technical checks on the submission.
Email correspondence. Once your enquiry reaches my inbox, I hold it there so I can reply and continue the conversation.
Server logs. This site is hosted by Cloudflare Pages. Like most web hosts, they automatically record technical information when a page is requested — including IP addresses, browser type, and pages accessed. This is used to serve the site securely and detect abuse. I do not use these logs to identify individual visitors. Web3Forms similarly keeps short-lived server logs, which they delete on a rolling basis.
Why I use it, and my lawful basis
To respond to your enquiry and discuss potential work. Lawful basis: legitimate interests — you have contacted me about my services, and replying is the obvious and expected purpose. This is a mutual interest and involves no processing you would not anticipate.
To provide services, where we go on to work together. Lawful basis: contract — processing necessary to perform our agreement.
To keep business and accounting records. Lawful basis: legal obligation — I am required to retain certain records for tax purposes.
To operate the website and the contact form securely, including spam prevention. Lawful basis: legitimate interests — keeping the site and my inbox functional and free from abuse.
Who I share it with
I do not sell your data, and I do not share it for marketing purposes.
Your data is handled by the service providers I use to run this site and my business:
- Web3Forms (Web3Creative, India; servers in the United States) — processes contact form submissions and forwards them to my inbox
- Cloudflare Pages — website hosting and server logs
- Zoho Mail — email hosting, where enquiries are received and stored
- HMRC, where required for tax records
I may also disclose information where I am legally required to do so.
Transfers outside the UK
Some of the providers above process data outside the UK.
In particular, contact form submissions are transferred to the United States, where Web3Forms’ servers are hosted, and Web3Forms’ parent company operates from India. Cloudflare Pages and Zoho Mail may also process data outside the UK.
Where personal data is transferred outside the UK, I rely on appropriate safeguards as required by UK data protection law. If you would like more information about the safeguards in place for a specific transfer, contact me at [email protected]
If you would prefer not to have your details transferred outside the UK, you are welcome to email me directly at [email protected] instead of using the contact form.
How long I keep it
- Web3Forms’ copy of your submission: automatically deleted by Web3Forms after 30 days.
- Enquiries that do not lead to work: deleted from my inbox within 12 months.
- Client correspondence and contact details: kept for the duration of our working relationship, then for up to 6 years afterwards, in line with business record-keeping requirements.
- Accounting records: kept for 6 years, as required by HMRC.
- Server logs: retained for the period set by each provider, typically a short rolling window.
I review what I hold periodically and delete what I no longer need.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data I hold about you
- ask me to correct anything inaccurate
- ask me to delete your data
- ask me to restrict how I use it
- object to my use of it where I rely on legitimate interests
- ask for your data in a portable format
To exercise any of these, email me at [email protected]. I will respond within one month. There is no charge.
Cookies
This site does not use cookies for tracking or advertising. Any cookies set are strictly necessary for the site to function.
Complaints
If you are unhappy with how I have handled your personal data, please contact me first at [email protected] — I will look into it and respond.
Changes to this policy
I may update this policy from time to time. Any changes will be posted here with a revised “last updated” date.
