Privacy policy

This policy explains how Nathan Simmonds Digital Limited (company number 09514343, registered office 20-22 Wenlock Road, London, N1 7GU, England) collects and uses personal data through this website and in providing our services. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

ICO registration reference: ZA911989

1. Personal data we collect

  • Enquiries: when you use the contact form, we collect your name, email address, phone number, and the message you send us.
  • Clients: if you engage us for a service, we collect the information needed to deliver it and invoice you — typically your name, business details, contact details, and project-related information. For hosting and managed hosting clients, this may include data stored on infrastructure we manage on your behalf, where we act as a data processor under a separate agreement.
  • Analytics: if you consent via the cookie banner, we collect anonymised usage data through Google Analytics (pages visited, approximate location, device/browser type). See our Cookie Policy for details.
  • Security: our contact form uses Cloudflare Turnstile to prevent spam and abuse, which processes limited technical data (e.g. browser signals) to verify you're not a bot.

2. Why we process it and our lawful basis

  • Responding to your enquiry — legitimate interests (answering questions from prospective clients).
  • Delivering a contracted service and billing for it — performance of a contract.
  • Website analytics — consent, given (or withheld) via the cookie banner, and withdrawable at any time.
  • Preventing spam/abuse via Turnstile — legitimate interests (keeping the site and our inbox usable).
  • Meeting legal obligations, e.g. retaining invoices for tax purposes — legal obligation.

3. Who we share it with

We don't sell personal data. We may share it with:

  • service providers who help us run the business (e.g. our website hosting provider, email provider, accounting software) under contracts that require them to protect your data;
  • Google, if you consent to analytics cookies, and Cloudflare, for spam protection — both may process data outside the UK, safeguarded by standard contractual clauses or an equivalent approved transfer mechanism;
  • law enforcement or regulators, where we're legally required to.

4. How long we keep it

We keep enquiry details for as long as needed to respond, and delete them if no engagement follows within a reasonable period. Client and invoicing records are kept for as long as our contract with you lasts, plus the period required by law (currently up to 6 years for UK tax records). Analytics data is retained according to Google Analytics' standard retention settings.

5. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete your data, in some circumstances;
  • restrict or object to our processing;
  • receive your data in a portable format;
  • withdraw consent at any time (for anything based on consent, e.g. analytics — use the "Privacy settings" tab on the site);
  • complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

To exercise any of these, or to raise a complaint with us directly first, email support@nathansimmonds.digital and we'll respond within one month.

6. Security

We use reasonable technical and organisational measures to protect the personal data we hold, including secure hosting and access controls. No method of transmission over the internet is completely secure, so we can't guarantee absolute security.

7. Changes to this policy

We may update this policy from time to time; the version published here is the current one. Material changes will be reflected in the "last updated" date below.

Last updated: July 2026.