Privacy notice
Last updated: 15 October 2026
This notice explains what personal data DGDigital collects through dgdigital.dev, why, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The data controller is Damian Gozzett, trading as DGDigital, a sole trader based in Brighton & Hove, England. Contact: hello@dgdigital.dev.
What data we collect
- Enquiry form: your name, email address, business name (if given), the services you pick, your message and the date and time sent.
- Anti-spam data: when you send the form we create one-way hashes of your IP address, email address and message. Hashes cannot be turned back into the original data; we use them only to limit repeat and automated submissions.
- Payments (only if you buy something): payments are handled by Stripe. We receive a payment reference and status, not your full card details.
- Emails you send us and our replies.
- Technical logs: our host keeps short-lived server logs (such as IP address, browser type and requested page) to run and secure the site.
We do not use analytics or advertising tracking on this site. The demos at /demos run entirely in your browser; anything you type or upload there is not sent to us.
Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a quote | Steps at your request before entering a contract; otherwise legitimate interests in responding to business enquiries |
| Delivering work you have agreed to buy, invoicing and support | Contract |
| Preventing spam and abuse of the form (hashed data) | Legitimate interests in keeping the site secure |
| Keeping business and tax records | Legal obligation |
We do not sell your data or use it for marketing without your consent.
Who processes data for us
- Vercel Inc.: website hosting, server functions and logs.
- Purelymail: email hosting for hello@dgdigital.dev; enquiry emails and replies.
- Neon: database for anti-spam hashes.
- Stripe: card payments, if you buy a paid report or service.
How long we keep it
- Enquiries and related emails: up to 2 years from our last contact, unless they become part of a project.
- Anti-spam hashes: 3 days, then deleted automatically.
- Client and invoicing records: 6 years after the end of the financial year, as required for tax.
International transfers
Some of our providers store or process data outside the UK, including in the USA and the EU. Where that happens we rely on UK adequacy regulations (for example for the EU, or US organisations certified under the UK Extension to the EU-US Data Privacy Framework) or on the ICO’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, as offered by each provider.
Your rights
You have the right to: access your data; have it corrected; have it erased; restrict or object to how we use it (including where we rely on legitimate interests); data portability; and withdraw consent where we rely on consent. To use any of these rights, email hello@dgdigital.dev. We will reply within one month. There is normally no charge.
Complaints
Please contact us first so we can try to put things right. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Cookies
See our cookie notice.
Changes
We may update this notice. The date at the top shows when it last changed.