Privacy Policy

Last updated: [ADD DATE WHEN YOU PUBLISH]

Who we are

Digital Spectrum Labs is a sole trader based in the United Kingdom.

[ADD YOUR FULL LEGAL NAME]
[ADD YOUR BUSINESS ADDRESS]
Email: [email protected]

We are the "data controller" for the personal information described in this policy — meaning we decide what is collected and why.

What we collect, and when

When you use our contact form or email us: your name, your email address, the service and package you selected, and whatever you write in your message. We collect this because you've chosen to send it to us.

When you become a client: the information needed to deliver and invoice the work — typically your business name, billing address, and project materials you send us.

Payments: if and when we take payment online, card details are handled entirely by our payment provider (Stripe). We never see or store your full card number.

We do not buy personal data from third parties, and we do not run advertising trackers on this website.

Why we're allowed to use it

Under UK GDPR we rely on two lawful bases. For enquiries, it's legitimate interests — you contacted us about our services, so it's reasonable for us to reply. For client work, it's performance of a contract — we need your details to actually deliver what you've hired us to do. Where we're legally required to keep records (for example, tax), the basis is legal obligation.

How long we keep it

Enquiries that don't turn into work: up to 24 months, then deleted. Client records: retained for 6 years after the final invoice, because HMRC requires business records to be kept for that long. You can ask us to delete enquiry data sooner at any time.

Who else sees it

We keep this list deliberately short:

• Netlify — hosts this website and processes contact form submissions
• Cloudflare — provides our domain and forwards email sent to our address
• Google (Gmail) — where our email is received and stored
• Stripe — processes payments, where applicable
• Trusted freelance specialists — on larger projects, and only the project information they need to do their part of the work

We never sell your data, and we don't share it for marketing purposes. Some of these providers are based outside the UK; where that's the case, transfers are covered by the providers' own approved safeguards.

Cookies

This website does not use advertising or tracking cookies, and does not run analytics software. Our host may set a small number of strictly necessary cookies required for the site and its contact form to function and to protect against spam — these are exempt from consent requirements under UK law because the site cannot work properly without them.

If we add analytics or marketing tools in future, we will add a cookie consent banner and update this policy before doing so.

Your rights

Under UK GDPR you can ask us to: give you a copy of the personal data we hold about you; correct it if it's wrong; delete it; restrict how we use it; or object to us using it. Email [email protected] and we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.

Changes to this policy

If we change how we handle personal data, we'll update this page and change the date at the top.