Privacy policy

Who we are

Damson Website Design is a trading name of Worksmarter.digital Ltd, a company registered in England and Wales (company number 13247254). Our registered office is Tortworth Lodge, Tortworth, Wotton-Under-Edge, Glos, GL12 8HG. This is a registered office only; we work from Gloucester and serve clients across Gloucestershire, and we don’t see visitors at this address.

Worksmarter.digital Ltd (trading as Damson Website Design) is the “controller” of the personal information described here, which means we decide how it’s used and we’re responsible for looking after it. We’re registered with the Information Commissioner’s Office (ICO), registration number ZB272086.

Matt Davis, our director, looks after data protection. You can reach him at hello@damsonwebsitedesign.co.uk or through our contact form.

What we collect

When you use our contact form (built with Gravity Forms, a WordPress forms plugin): your name, company (if you give it), email address, current website (if you have one), what you need help with and your message.

When you ask for a free health check: your name, business name, email address, phone number (optional), your website address and anything you tell us about your goals.

With every form you send: the form records the date and time, the page you sent it from, your IP address and your browser type. We use these to spot spam and misuse. A hidden “honeypot” field also catches automated spam; it doesn’t collect anything about you.

When you email us: your email address, name and whatever you choose to tell us.

If you become a client: contact and billing details, the details of your project, and anything we need to do the work, such as access to your website, hosting or domain accounts. If you use our client portal or hosting control panel, we also hold your login details for those.

When you visit this website: like every website, our host keeps standard server logs (IP address, pages requested, browser type, date and time). These are used for security and to keep the site running. We don’t use advertising or social media tracking.

Analytics: We don’t use Google Analytics or any other analytics or visitor-tracking tool on this website.

Please don’t send us sensitive information, such as details about your health, through the forms. We don’t need it.

The free health check

To prepare your report, we look at the public pages of the website you give us, the same way a visitor or a search engine would. We use Google PageSpeed Insights, a free Google service that runs Google’s Lighthouse tests, so your website address is sent to Google. If PageSpeed Insights isn’t available, we run the same Lighthouse tests on our own computer instead. Our own scripts also visit your pages to take screenshots and check things like page titles, links, redirects and image sizes. We don’t log in to your website or try to get into anything that isn’t public.

Your report may include details that are already shown publicly on your website, such as your business name, address or phone number. We email the report to the address you give us.

Asking for a health check doesn’t commit you to anything, and we won’t add you to a mailing list.

Why we use it, and our lawful basis

Data protection law says we need a lawful reason for each way we use your information. Here’s what we use it for and the reason that applies.

We don’t send marketing emails, and we don’t make automated decisions about you that have legal or similarly significant effects.

Who we share it with

We never sell or rent your information. We share it only with services that help us run the business. They act on our instructions and must keep it secure.

• 20i Ltd, a UK hosting company, hosts this website and our email (StackMail), and provides the content delivery network and security layer in front of the site (StackCDN and StackProtect). Our hosting control panel for clients is also provided by 20i.
• Gravity Forms (made by Rocketgenius, Inc.) is the plugin that runs our contact and health check forms. It runs inside our website, so form entries are stored in the website’s database on 20i’s servers and a copy is emailed to our 20i-hosted mailbox. Entries are not sent to Rocketgenius.
• Google Fonts. The fonts on this site are loaded from Google’s servers, so your browser sends your IP address to Google when a page loads. No cookies are set.
• Cloudflare (cdnjs) and jsDelivr. The icons and some of the animation code on this site load from these public networks, which also see your IP address when a page loads. No cookies are set.
• SuiteDash runs our client portal. It only holds information about clients who have a portal account.
• Professional advisers, such as an accountant, when we need them.
• Authorities, if the law requires us to share information.

Transfers outside the UK

Some of these services (Google, Cloudflare, jsDelivr’s network and SuiteDash) may handle information outside the UK, including in the United States. When they do, we rely on the protections UK law allows: UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Agreement or Addendum offered by the provider.

How long we keep it

We keep information only as long as we need it:

• Enquiries and health check requests that don’t lead to work: 12 months from our last contact, then the form entry and emails are deleted.
• Health check reports: 12 months from when we send them.
• Spam caught by the forms: deleted within 30 days.
• Client records (proposals, agreements, project emails and invoices): 6 years from the end of the financial year in which our work for you ends. Tax and company law require this.
• Client portal accounts: closed within 3 months of our work for you ending.
• Server logs: kept by 20i for a short period for security, then deleted automatically.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that’s wrong or incomplete
• ask us to delete your information
• ask us to limit how we use it
• object to us using it where we rely on legitimate interests
• ask for information you gave us in a format you can pass to someone else

To use any of these rights, email hello@damsonwebsitedesign.co.uk. It’s free, and we’ll reply within one month. We may ask you to confirm your identity first. Some rights have exceptions; for example, we have to keep invoices for as long as tax law says, even if you ask us to delete them.

Keeping it safe

This website uses an encrypted (HTTPS) connection, so what you type into the forms is protected on its way to us. Form entries can only be seen by logging in to the website’s password-protected admin area, and our email and other accounts are password protected too.

Cookies

This website only uses cookies that are needed for it to work securely. There’s no analytics or advertising. Our cookie policy lists them.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first and we’ll do our best to put it right.

You can also complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use personal information, we’ll update this page and the date at the top.