Privacy policy

Who I am

Darren Hodson Digital is the trading name of Darren Hodson, a web designer and developer based at 79 Pershore Road, Edgbaston, Birmingham B5 7NX, United Kingdom. I'm the "data controller" for the personal information described in this policy, which means I decide how it's used and I'm responsible for looking after it.

There's no team or call centre: if you have a question about your information, you'll be speaking to me. Contact details are at the bottom of this page.

What information I collect

When you get in touch

If you email, call, message me on WhatsApp or contact me through social media, I'll have your name, contact details and anything you choose to tell me, such as details about your business and the website you need.

When you become a client

To deliver your project and any ongoing hosting or support, I keep your name, business name, address, email, phone number, project details, invoices and payment records. If I register a domain name for you, the registration details you provide are passed to the domain registry, as the rules for that domain require.

When you visit this website

• Security and delivery: this site is delivered by Cloudflare, which processes technical information such as your IP address, browser type and the pages requested, so it can deliver the site quickly and protect it from attacks.
• Analytics (only if you agree): if you accept analytics cookies, Google Analytics records how visitors use the site, such as the pages viewed, how long visits last, roughly where visitors are (town or country level) and the device used. I can't identify you personally from this.
• Google reviews widget (only if you agree): if you allow it, a widget provided by Elfsight shows my Google reviews and sets a short-lived cookie to count views.
• Google Search Console: I use Search Console to see how my site appears in Google search results. It gives me totals, such as how many people searched for a phrase and clicked through. It doesn't set cookies on this site or tell me who you are.

Full details of cookies are in my cookie policy.

How and why I use your information

Data protection law requires me to have a lawful reason for using your information. Mine are:

• Replying to enquiries and preparing quotes: taking steps at your request before a contract, or my legitimate interest in responding to people who contact me.
• Delivering websites, hosting and support: performing our contract.
• Invoicing and keeping accounts: meeting my legal obligations, including HMRC record-keeping.
• Keeping this website secure and working: my legitimate interest in running a safe, reliable website.
• Website analytics and the reviews widget: your consent, which you can withdraw at any time using cookie settings.
• Occasional updates to existing clients about your website, hosting or services relevant to you: my legitimate interest. You can ask me to stop at any time.

I never sell your information, and I don't use it for automated decision-making or profiling.

AI tools

I build websites with the help of AI tools, including Claude by Anthropic. I use them for design, code and drafting website content. I don't put your personal information into AI tools unless it's needed for your project (for example, contact details that will appear on your own website), and I review everything the AI produces before it's used.

Who I share information with

I only share what's needed, with trusted providers who help me run my business:

• Krystal Hosting (UK): business email and website hosting.
• Cloudflare: delivering and protecting this website and client websites.
• Google: Google Analytics (only with your consent), Search Console and Google Business Profile.
• Elfsight (Andorra): the Google reviews widget, only with your consent.
• GitHub: stores website code. This doesn't include information about website visitors.
• WhatsApp and Meta: only if you choose to contact me through WhatsApp or Facebook.
• Domain registries such as Nominet, when I register a domain name on your behalf.
• My accountant and HMRC, for accounts and tax.

I may also share information if the law requires it, or to protect my rights in a dispute.

International transfers

Some of these providers, including Google, Cloudflare and Meta, may process information outside the UK, for example in the United States. When that happens, the transfer is protected by UK adequacy regulations (such as the UK-US Data Bridge) or by approved contract terms (the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses).

How long I keep information

• Enquiries that don't lead to work: up to 12 months, then deleted.
• Client records, contracts and invoices: 6 years after our work together ends, as required for tax purposes.
• Google Analytics data: 14 months, then deleted automatically.
• Security logs held by Cloudflare: a short period set by Cloudflare, usually days rather than weeks.

Keeping it safe

I use strong passwords, two-factor authentication and encrypted connections (HTTPS) throughout, and only use reputable providers. If something ever went wrong that put your information at risk, I'd tell you and, where required, the Information Commissioner's Office.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), and the EU GDPR if you're in the European Union, you have the right to:

• ask for a copy of the information I hold about you
• ask me to correct anything that's wrong or incomplete
• ask me to delete your information
• ask me to limit how I use it, or object to me using it
• ask for your information in a portable format
• withdraw your consent at any time, where I rely on consent

Just email me. There's no charge, and I'll reply within one month. Some rights have limits: for example, I have to keep invoices for tax purposes.

Complaints

If you're unhappy with how I've handled your information, please tell me first and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk or 0303 123 1113. If you live in the EU, you can contact the data protection authority in your country.

Children

My services are for businesses and adults. I don't knowingly collect information from children.

Changes to this policy

I'll update this policy if the way I handle information changes. The date at the top shows when it was last updated.