Last updated: 12 October 2026
This policy explains what personal information I collect when you visit philipabbott.co.uk or get in touch with me, what I do with it and the rights you have. I’ve kept it short because the site collects very little.
Who I am
I’m Philip Abbott, a freelance web designer trading as Philip Abbott Digital, based in Salisbury, Wiltshire. I’m the data controller for the personal information described here. If you have any questions about this policy or your data, email me.
What I collect
When you use the contact form
The contact form asks for your name, email address and message. You can also give your organisation and the type of project you need. I use this to reply to your enquiry and, if we decide to work together, to plan and quote for the project.
When you email me
If you email me directly, I’ll receive your email address, your name if your email shows it, and anything you include in the message or attachments.
When you browse the site
The site doesn’t use analytics, advertising or social media tracking. Like any web host, my hosting provider automatically records basic technical information when you load a page, such as your IP address, browser type and the page requested. This is used to deliver the site and keep it secure, and I don’t use it to identify you.
Why I use your information
Under UK data protection law I need a lawful basis for using your personal information. My bases are:
- Taking steps before a contract: replying to your enquiry and preparing a proposal or quote at your request.
- Contract: delivering work we’ve agreed, and managing invoices and payments.
- Legitimate interests: keeping the site and contact form secure and free of spam, and keeping a record of past conversations.
- Legal obligation: keeping business and financial records for HMRC.
I won’t add you to a mailing list or send you marketing emails, and I’ll never sell your information.
Cookies and local storage
This site doesn’t set its own cookies. It stores one small setting in your browser’s local storage, keahi-theme, which remembers whether you chose the light or dark colour scheme. It contains no personal information and stays on your device. You can clear it at any time through your browser settings.
The contact form is protected by Google reCAPTCHA (see below). reCAPTCHA only loads when the form scrolls into view or you start filling it in, and Google may set cookies to tell people and spam bots apart.
Who I share your information with
I only share your information with the services I need to run the site and my business:
- Netlify hosts the website and receives contact form submissions on my behalf. See Netlify’s privacy policy.
- Google reCAPTCHA checks that contact form submissions come from a real person. To do this, Google collects information about your device and how you use the page. Your use of reCAPTCHA is covered by Google’s Privacy Policy and Terms of Service.
- My email and business software providers hold our correspondence and records, such as invoices.
- HMRC where needed for tax and accounting.
Some of these providers are based in, or store data in, the United States. Where your information is transferred outside the UK, it’s protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
How long I keep it
- Enquiries that don’t lead to a project: up to 2 years, so I have the context if you get back in touch. After that I delete them.
- Client records: for as long as we’re working together, then for 6 years after the end of the financial year that our last invoice falls in, as HMRC requires.
- Hosting logs: kept by Netlify for a limited period under its own retention policy.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information I hold about you
- ask me to correct anything that’s wrong or incomplete
- ask me to delete your information
- object to, or ask me to restrict, how I use it
- ask me to transfer your information to you or another organisation
To use any of these rights, email me. There’s no charge, and I’ll reply within one month. Some rights don’t apply in every situation. For example, I can’t delete records I’m legally required to keep.
Complaints
If you’re unhappy with how I’ve handled your information, please tell me first so I can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Links to other websites
This site links to other websites, including LinkedIn and websites I’ve built for clients. Those sites have their own privacy policies, and I’m not responsible for how they handle your information.
Changes to this policy
I’ll update this page if the way I handle personal information changes, for example if I add new services to the site. The date at the top shows when it was last revised.