Your information, handled properly.

Jones Digital is a web design and branding agency based in Merthyr Tydfil, South Wales, trading as Jones Digital at www.jonesdigital.co.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Jones Digital is the data controller for personal information collected through this website.

You can contact us about anything in this policy at enquiries@jonesdigital.co or on 01443 565809.

We only collect what we need in order to respond to you and to run the business.

Information you give us. When you submit an enquiry or booking form, or email or call us, we may collect:

• your name and business name;
• your email address and telephone number;
• the service you are interested in;
• your project details, indicative budget and desired timescale, if you provide them.

Information collected automatically. When you visit the site, privacy-conscious analytics record aggregated, non-identifying information such as the pages viewed, referring source, approximate country and device type. This is not used to build a profile of you and is not sold or shared for advertising.

Information we do not collect. We do not knowingly collect special category data (for example health, religious belief or ethnicity), and our forms will never ask for passwords, payment card details, bank details or identity documents.

We use your personal information to:

• respond to your enquiry and provide the consultation you have asked for (our contract with you, or steps taken at your request before a contract);
• prepare quotations and deliver projects you have commissioned (performance of a contract);
• keep records of our work, invoices and correspondence (our legitimate interests in running the business, and our legal obligations for tax and accounting);
• send you information about your own project, including through Jones Digital Hub (performance of a contract);
• send marketing emails about our services, but only where you have opted in or where you are an existing client and have not asked us to stop (consent or legitimate interests). Every such email contains a one-click unsubscribe link.

We do not use your information for automated decision-making or profiling, and we do not sell it to anyone.

Under UK GDPR we rely on the following lawful bases:

• Contract — to respond to your enquiry, quote for work and deliver a project you have commissioned.
• Legitimate interests — to run and improve our business, keep records, and understand how our website is used in aggregate. We have considered your rights and interests and do not believe this use is intrusive.
• Consent — for marketing emails to people who are not existing clients, and for any optional cookies or similar technologies that are not strictly necessary.
• Legal obligation — to keep financial records for the periods required by law.

We do not sell, rent or trade your personal information. We share it only with the service providers we rely on to run the business, and only as far as needed:

• our website hosting and form-handling provider, which stores enquiries on our behalf;
• our email provider, which delivers enquiry notifications and any messages we send you;
• our accounting and invoicing tools, for quotations, invoices and statutory records;
• our customer-account and checkout providers, if you buy a product or service from us through this website. Payment card details are handled entirely by our payment provider — we never see or store them;
• our professional advisers, such as an accountant, where that is necessary;
• law enforcement or a regulator, where we are legally required to disclose information.

All of these providers are bound by their own contractual and legal obligations to protect your information.

• Enquiries that do not become projects — up to 12 months, then deleted.
• Client project records — for the duration of the project and for six years afterwards, so we can support you and meet our legal obligations.
• Financial and tax records — six years from the end of the relevant accounting period, as required by HMRC.
• Marketing contacts — until you unsubscribe or ask us to remove you.

Under UK GDPR you have the right to:

• be told how your information is used — this policy does that;
• request a copy of the personal information we hold about you;
• have inaccurate information corrected;
• ask us to delete information we no longer need to keep;
• ask us to restrict how we use it;
• object to processing based on our legitimate interests;
• receive information you gave us in a portable format;
• withdraw consent at any time where consent is the basis for processing.

To exercise any of these, email enquiries@jonesdigital.co. We will respond within one month. There is no charge. We may ask you to confirm your identity before acting, so that we do not disclose information to the wrong person.

This website is served over HTTPS and our systems are protected with strong passwords and multi-factor authentication. Access to client information is limited to those who need it to do the work — which, in a studio our size, means the people actually working on your project.

No online transmission can be guaranteed completely secure. If a breach affecting your rights occurs, we will notify you and the Information Commissioner's Office where we are legally required to do so.

This website uses a small number of cookies and similar technologies. Strictly necessary ones keep the site working; optional analytics cookies help us understand which pages are useful. Optional cookies are only set once you accept them, and you can change or withdraw your choice at any time using the cookie settings link in the footer.

Our full breakdown of what is set, by whom and for how long is in our Cookie Policy.

Some of our service providers operate globally, so your information may be processed outside the United Kingdom. Where that happens, we rely on providers offering appropriate safeguards, such as the UK International Data Transfer Addendum or an adequacy decision, and we choose providers on that basis.

We may update this policy from time to time. The date at the top of the page shows when it last changed, and significant changes will be made clear on this page.

If you are unhappy with how we have handled your information, please tell us first at enquiries@jonesdigital.co so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.