Who is responsible for this site
This website is operated by Magnus Petersson / MP Web Design, based in Henley-on-Thames, RG9, United Kingdom.
For the purposes of personal information submitted through this website, Magnus Petersson / MP Web Design is the data controller.
For privacy enquiries, use the contact form or the email link on the contact page.
Applicable data protection law
This notice is intended to provide the transparency information expected under the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations for visitors in the United Kingdom.
Where the EU General Data Protection Regulation applies, for example because personal data of people in the European Economic Area is processed in connection with an enquiry or work relationship, this notice is also intended to provide the transparency information required under EU data protection law.
What personal information is collected
If you use the contact form, the information you provide may include your name, email address, phone number, and anything you choose to write in your message.
The site may also process limited technical information, such as IP address, browser details, device information, and security signals, where this is necessary to operate the website, prevent spam, or keep the service secure.
Why this information is used
Personal information is used to respond to enquiries, discuss possible work, provide requested information, maintain records of correspondence, and protect the website from spam or abuse.
The usual lawful bases for this processing are legitimate interests, such as responding to enquiries, running the business, and keeping the site secure; taking steps before entering into a contract, such as discussing a potential project or proposal; and, where applicable, compliance with legal obligations, such as keeping accounting or legal records.
If non-essential cookies, direct marketing, or any other consent-based processing is introduced in future, consent will be requested where required and may be withdrawn.
Contact forms and third-party services
The contact form is handled through Formspree. When you submit the form, the information you enter is sent to Formspree so that the enquiry can be delivered.
The form also uses Cloudflare Turnstile to reduce spam and automated abuse. Cloudflare may process technical information about your browser or device to determine whether the form submission appears legitimate.
Cookies and local storage
This site does not intentionally use advertising cookies or behavioural tracking cookies.
The dark mode preference is stored in your browser using local storage, so the site can remember whether you prefer the light or dark theme. This is a functional preference and is not used for advertising or profiling.
Cloudflare Turnstile and other security or hosting services may use cookies or similar technologies that are necessary for security, fraud prevention, or service delivery. Strictly necessary cookies and similar technologies may be used without consent where they are needed to provide a service you have requested or to keep the website secure.
Under UK PECR and equivalent European rules, non-essential cookies or similar technologies should not be set unless clear information has been provided and consent has been obtained where required.
This site uses Cloudflare Web Analytics for basic visitor measurement, such as page views, referring sources, and country-level location. Cloudflare Web Analytics does not use cookies, does not fingerprint visitors, does not store or read information on your device, and does not collect personal information. Because no cookies or similar technologies are set and no personal information is collected, no consent is required under PECR for this measurement.
If advertising, behavioural tracking, embedded media that sets cookies, or other non-essential tracking is added in future, this notice will be updated and consent will be requested where required.
How long information is kept
Enquiry information is kept for as long as reasonably necessary to respond, manage the relationship, keep business records, or deal with follow-up questions.
If an enquiry does not lead to work, the information will not be kept longer than is reasonably useful unless there is a clear reason to retain it.
Who information is shared with
Information may be shared with service providers who help operate this website or handle enquiries, including hosting providers, Formspree, Cloudflare, and email service providers.
Information is not sold. It is not shared for third-party advertising.
International processing
Some service providers may process information outside the United Kingdom or the European Economic Area. Where this happens, appropriate safeguards should be used in accordance with applicable data protection law.
Those safeguards may include adequacy regulations or decisions, standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or equivalent protections where applicable.
Your rights
Depending on the circumstances, you may have the right to ask for access to your personal information, correction of inaccurate information, deletion of information, restriction of processing, objection to processing, or a copy of information you have provided in a portable format.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
If you are in the United Kingdom, you have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal information is handled. If EU GDPR applies to you, you may also have the right to complain to your local data protection supervisory authority in the European Economic Area.
Marketing
This site does not currently operate a marketing mailing list and does not sell personal information or share it for third-party advertising.
If a mailing list or other direct marketing is introduced in future, this notice should be updated and an unsubscribe or opt-out route should be provided where required by law.
Children
This website is aimed at businesses, organisations, and adults looking for web design and related services. It is not intended for children and does not knowingly collect personal information from children.
Automated decision-making
This site does not use personal information for solely automated decision-making or profiling that produces legal or similarly significant effects.
Changes to this notice
This notice may be updated from time to time, especially if the website changes, new services are added, or the way enquiries are handled changes.