Privacy Policy

1. Who we are

This Privacy Policy applies to MachFly Digital Studio ("MachFly Digital Studio", "we", "us", or "our"), a web design studio registered in England and Wales, based in Huntingdon, Cambridgeshire.

MachFly Digital Studio is the data controller for the personal information collected through this website (machflydigitalstudio.co.uk). This means we are responsible for deciding how and why your personal data is used, and for keeping it safe.

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. What information we collect

Information you give us directly

When you fill in our contact form or send us an email, we may collect:

• Your name
• Your email address
• Your company or business name
• Any other information you choose to include in your message

Information collected automatically

If you consent to analytics cookies, we collect anonymised data about how you use the website, including:

• Pages visited and time spent on each page
• Device type (mobile, desktop, tablet)
• Browser type and operating system
• Approximate geographic location (country or region level only)
• How you arrived at the site (e.g. search engine, direct, referral)

This data is collected through Google Analytics and cannot be used to identify you personally. No IP addresses are stored in identifiable form.

Information we do not collect

We do not collect payment card details, national insurance numbers, passport details, or any other sensitive personal information through this website.

3. How we use your information

We use the information you provide to us for the following purposes:

• To respond to your enquiry or message
• To provide you with a quote or proposal if requested
• To fulfil a contract with you, where applicable
• To improve this website and understand how visitors use it (analytics only, with consent)

We will never use your information to send unsolicited marketing emails. If we wish to send you information about our services in the future, we will always ask for your explicit consent first.

4. Legal basis for processing

Under UK GDPR, we must have a legal basis for processing your personal data. The bases we rely on are:

• Legitimate interests — responding to enquiries you have sent to us
• Contractual necessity — processing data required to fulfil a project or service agreement
• Consent — analytics cookies, where you have actively agreed via our cookie banner
• Legal obligation — where we are required by law to retain certain records

5. Sharing your data

We do not sell, rent, or trade your personal data. We do not share your information with third parties for marketing purposes.

In limited circumstances, your data may be accessed by:

• Google Analytics — anonymised usage data, only if you have consented to analytics cookies
• Email service providers — such as Google Workspace, which processes emails sent to and from [email protected]
• Legal authorities — only if we are required to disclose information by law or a court order

All third-party services we use are required to handle your data in compliance with applicable data protection law.

6. Cookies

This website uses two categories of cookies:

Essential cookies

These are necessary for the website to function and cannot be switched off. They include your cookie consent preference. No personal data is stored in essential cookies.

Analytics cookies (optional)

With your consent, we use Google Analytics to understand how visitors use this site. These cookies collect anonymised data only. You can withdraw your consent at any time by clearing your browser cookies and revisiting the site, where you will be shown the cookie banner again.

You can also manage or block cookies directly in your browser settings. Note that disabling certain cookies may affect the functionality of some websites.

7. How long we keep your data

We retain personal data only for as long as is necessary for the purpose it was collected:

• Enquiry and contact form data — up to 2 years, unless a client relationship develops
• Client project data — up to 6 years after project completion, in line with UK business record-keeping requirements
• Analytics data — as per Google Analytics' standard retention settings (up to 26 months)

After these periods, data is securely deleted or anonymised.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data in certain circumstances
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a structured, commonly used format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. There is no charge for making a request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We take the security of your personal data seriously. As a studio founded by someone with a background in IT infrastructure, we apply appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure.

These measures include secure email communications, HTTPS encryption on this website, and restricted access to any stored personal data. No method of transmission over the internet is entirely secure, however we take all reasonable steps to protect your information.

10. Third-party links

This website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We recommend you read the privacy policy of any external site you visit.

11. Children

This website is intended for business use and is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of this website after any changes constitutes your acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please get in touch:

You also have the right to complain to the UK supervisory authority: