Privacy notice

Who we are

This website is run by James Brown on behalf of James-Frown Holdings Ltd, the data controller for the personal data described here. You can reach us about anything in this notice through the contact form.

What we collect

• Contact form: your name, email address, the project type if you give one, and your message.
• Technical data: our host, Netlify, keeps standard server logs, such as IP address, browser type and the pages requested, to run and secure the site.

The site sets no cookies and uses no analytics, advertising or tracking tools.

Why we use it, and our lawful basis

• To reply to your enquiry and discuss a possible project. This is taking steps at your request before entering a contract (Article 6(1)(b) UK GDPR), or our legitimate interest in responding to people who contact us (Article 6(1)(f)).
• To keep the site secure and working, which is our legitimate interest (Article 6(1)(f)).

We never sell your data or use it for marketing lists.

Who we share it with

• Netlify, which hosts the site and processes form submissions.
• Google, whose Gmail service receives the email that notifies us of your message.

Both may process data in the United States. Transfers rely on recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Enquiries are kept for up to 12 months after our last contact with you, then deleted. If you become a client, we keep what we need for the engagement and for any legal or accounting obligations.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, or to receive a copy in a portable format. Contact us through the contact form and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.