How this site handles your data, in plain English.
What this site collects, and why.
This site is run by Liam Doughty, trading as Doughty Digital, a sole trader based in York. I'm the data controller for any personal data this site collects. You can reach me at hello@doughtydigital.co.uk or +44 (0) 7540 073 133.
The enquiry form asks for your first name, last name, email address, an optional phone number, the service you're interested in, and your message. I use this to reply to your enquiry. There's no other reason I'd need it. The form sets no cookies, and spam is filtered by the platform itself without any outside service. Nothing you submit is shared with anyone else, sold, or used for marketing you haven't asked for.
The lawful basis for processing this is legitimate interest: responding to an enquiry someone has chosen to send me is a reasonable, expected use of that information, and it's processed only for that purpose.
Enquiries are kept for as long as is reasonable to handle your request and any follow-up conversation, and are then deleted. If we go on to work together, information relevant to that project is kept for the length of the engagement and for as long afterwards as UK tax and accounting rules require.
This site, its contact form and the client dashboard are run for me by my website platform provider, which stores and processes this information on my behalf, under a data processing agreement, and only to provide those services. It's held in the UK (Google Cloud's London region), and server request logs are kept for 30 days. Card payments in the client dashboard are handled by Stripe. I don't sell or pass your details to anyone else.
This site keeps cookies and browser storage to a minimum. Only what's needed for it to work runs without asking; visit statistics, embedded content such as maps or videos, and marketing only run if you allow them in the cookie banner. The lawful basis for these optional items is your consent. The full list of what's stored, why and for how long is in the cookie policy, and you can change your choice at any time with the Cookie settings link at the bottom of every page.
This site loads its typefaces from Google Fonts. When a page loads, your browser makes a request to Google's servers to fetch those fonts, which means Google receives your IP address as part of that request. Google's handling of that data is covered by their own privacy policy.
If you're a client, the dashboard stores what it needs to keep you signed in, and Stripe handles card payments. The details are in the cookie policy.
Under UK GDPR, you have the right to ask what personal data I hold about you, to have it corrected if it's wrong, to have it deleted, and to object to how it's used. To do any of this, email hello@doughtydigital.co.uk and I'll sort it out directly.
If you're unhappy with how your data has been handled, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
If anything here changes, I'll update this page and the date below.
Last updated 25 October 2026.