Privacy Policy

This Privacy Policy explains how Higham Digital ("we", "us", "our") collects, uses, and protects any personal data you provide when you use our website or get in touch with us. We are committed to protecting your privacy and handling your data in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or submitting an enquiry, you agree to the practices described in this policy.

1. Who we are

Higham Digital is a web design and digital marketing business based in Cambridgeshire, United Kingdom, operating across the UK. For the purposes of data protection law, we are the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, you can contact us at: highamdigitalco@gmail.com.

2. What information we collect

We only collect the information we need to respond to your enquiry and run our website. This includes:

• ✓Information you give us directly — when you complete our contact or enquiry form, we collect your name, business name, email address, phone number (if provided), the service you're interested in, and any details you include in your message.
• ✓Information collected automatically — when you visit our website, we may collect limited technical data such as your IP address, browser type, device information, and how you interact with our pages. This is used to keep the site secure and understand how it's used.

We do not knowingly collect any special category data (such as health or financial information), and we ask that you do not include sensitive information in your enquiry messages.

3. How we use your information

We use the personal data we collect to:

• ✓Respond to your enquiry and arrange your free consultation;
• ✓Provide, quote for, and deliver the services you ask us about;
• ✓Communicate with you about your project or account;
• ✓Maintain the security and performance of our website;
• ✓Meet our legal and regulatory obligations.

4. Our lawful basis for processing

Under UK GDPR, we rely on the following lawful bases to process your data:

• ✓Consent — when you submit an enquiry form, you consent to us using your details to respond to you.
• ✓Legitimate interests — to respond to enquiries, run and secure our website, and manage our business, provided your rights do not override these interests.
• ✓Contract — where we are taking steps to enter into, or perform, a contract with you.

5. How your data is stored and shared

We do not sell your personal data. We only share it with trusted third-party service providers who help us operate our website and business, and only to the extent necessary. These may include:

• ✓Netlify — our website hosting and form-handling provider, which processes and stores enquiry form submissions on our behalf.
• ✓Analytics providers — such as Google Analytics, which help us understand how visitors use our site (only if enabled; see the Cookies section below).

Some of these providers may store or process data outside the UK. Where that happens, we take reasonable steps to ensure your data is protected by appropriate safeguards in line with UK data protection law.

6. How long we keep your data

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including to respond to your enquiry, deliver our services, and meet any legal or accounting requirements. When it is no longer needed, we securely delete or anonymise it.

7. Cookies

Our website may use cookies and similar technologies to help it function correctly and to understand how it is used. Cookies are small text files stored on your device. You can control or disable cookies through your browser settings, though some parts of the site may not work as intended if you do. Where required, we will ask for your consent before setting non-essential cookies.

8. Your rights

Under UK data protection law, you have the right to:

• ✓Access the personal data we hold about you;
• ✓Ask us to correct inaccurate or incomplete data;
• ✓Ask us to delete your data in certain circumstances;
• ✓Object to or restrict how we process your data;
• ✓Withdraw consent at any time, where we rely on consent;
• ✓Request a copy of your data in a portable format.

To exercise any of these rights, please contact us at highamdigitalco@gmail.com. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We'd appreciate the chance to address your concerns first, so please do get in touch with us before you do.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review it periodically.