Privacy policy

This policy explains how we handle personal data under the UK GDPR and the Data Protection Act 2018. It is written to be read, not to be got past.

Who is responsible for your data

We are the data controller for the personal data described here — we decide what is collected and why, and we are accountable for it.

The short version

• There are no tracking pixels, no advertising tags and no analytics on this site.
• There is no contact form that emails us. The Start a Project questions are answered on your own device and nothing reaches us until you press send.
• We do not sell, rent or share your data with anyone for marketing. Ever.
• The few things stored in your browser are listed in full in the cookie policy.

What we actually collect

If you use Start a Project

The questions ask for your name, your business, what you do, what you need and what you are trying to achieve. Those answers stay in your own browser while you work through them. They are not sent to us, and we cannot see them.

At the end you get a pre-written WhatsApp message. Nothing is sent automatically. If you choose to send it, your message and your phone number reach us through WhatsApp, and WhatsApp's own privacy terms apply to that. If you would rather email, waj@gener4tion.digital works just as well.

Lawful basis: your consent, given by pressing send, and our legitimate interest in responding to a business enquiry.

How long: the copy on your device is deleted automatically after six hours. An enquiry you actually send, we keep for as long as we need it to reply and, if we end up working together, to run the work — then for six years, because HMRC requires business records to be kept that long. Ask us to delete it sooner and we will, unless the law requires us to keep it.

If you email or message us

We keep the message and your contact details so we can reply and keep a record of what was agreed. Lawful basis: legitimate interest in running a business and answering people who contact it. How long: as above.

Just by visiting

Our host, Netlify, keeps standard server logs, which include your IP address, the page requested and your browser type. These exist to keep the site up and to spot abuse. We do not use them to build any profile of you and we do not combine them with anything else. Lawful basis: legitimate interest in the site's security and reliability. How long: Netlify's own retention period for logs.

Who else can see it

Only the companies we need to run the site, and only for that purpose. They are processors acting on our instructions, not free to use your data for themselves.

Some of these store or process data outside the UK. Where they do, the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an equivalent safeguard recognised under UK law.

Automated decisions and profiling

There are none. Nothing on this site scores you, ranks you or decides anything about you automatically. A person reads every enquiry.

Children

This is a business-to-business site and is not directed at children. We do not knowingly collect data about anyone under 18. If you believe we have, tell us at waj@gener4tion.digital and we will delete it.

Keeping it safe

• The whole site is served over HTTPS, so traffic between you and it is encrypted.
• The admin area is protected by a server-checked password and a signed, expiring session. No password or key is ever present in the code your browser downloads.
• Repeated failed sign-in attempts are throttled.
• Only the site owner has access. There is no shared login.

No system is perfect. If something did go wrong and your rights were at risk, we would tell the ICO within 72 hours and tell you without undue delay, as the law requires.

Your rights

Under the UK GDPR you can ask us to do any of the following, free of charge, and we will respond within one calendar month:

• See it. Get a copy of the personal data we hold about you.
• Correct it. Have anything wrong put right.
• Delete it. Have it erased, where we have no legal reason to keep it.
• Restrict it. Have us pause using it while a dispute is sorted out.
• Object. Tell us to stop processing it where we rely on legitimate interests.
• Move it. Receive it in a portable format, or have it sent elsewhere.
• Withdraw consent. Where we relied on consent, take it back at any time. That does not undo anything done lawfully beforehand.

To use any of these, email waj@gener4tion.digital. We may ask you to confirm who you are, so that we are not handing your data to somebody else.

If you are not happy with how we handled it

Tell us first at waj@gener4tion.digital — most things are a misunderstanding we can fix quickly. You also have the right to complain directly to the UK regulator at any time:

Changes to this policy

If we change how we handle data we will update this page and change the date at the bottom. If a change is significant we will say so rather than slip it in quietly.