Privacy notice.

Who we are

Deliberate Design is a two person web studio run by Kai and Charlie. If you want to ask anything about your information, or you want us to delete it, email hello@deliberate-design.co.uk and a person will answer.

What we collect, and why

If you send us a message. The contact form asks for your name, your email address and your message. That is passed to our inbox by a service called Web3Forms. We use it only to reply to you and to prepare a quote if you ask for one. It is not stored in a database on this website, and this website has no user accounts.

If you build a ready-to-go website. While you are building, everything you type and every photo you add is saved only in your own browser, on your own device. Nothing reaches us until you click to send your site. When you do, the finished site, the words and photos in it, your name, your email address, your phone number if you give one, the web address you would like and any notes are sent to our server and stored there, and a copy of the order details without the photos is emailed to us through Web3Forms. We use them to check the site, register your web address, send the invoice and host the site. Invoices are sent and paid through our payment provider, and if you pay by card we never see your card number.

If you bring in your current website. When you paste the address of a website into our editor, our server reads that site's public pages and sends what it finds, such as the business name, contact details, photos and products, straight back to your browser. We keep none of it. It stays on your device until you choose to send your site to us, as above. Our server sees your IP address while it does this, to stop the tool being abused.

If you buy from a shop we host. Your basket is kept in your own browser. When you press checkout, only the products and quantities are sent to our checkout service, which looks up the prices and passes you to the secure payment page of Stripe or PayPal, whichever you choose. Your name, address and card details go to that provider and the shop owner, never to us. Our server sees your IP address while it does this, to stop the checkout being abused, and it appears in our server logs, which are deleted after 14 days. The shop owner is responsible for your order and for how they use your details.

When you browse the site. We use Google Analytics to see roughly how many people visit and which pages they look at. It sets cookies in your browser and collects usage data such as your approximate location, the pages you view and the type of device you are on. We use it to understand what people find useful, nothing more. If you would rather not be counted, you can block cookies in your browser, use private browsing, or install Google's own opt out add on.

Fonts. The typefaces on this site are served from our own server, so no request goes to a font company when you read a page. The one exception is our website editor, where the preview of your site loads the lettering you pick from Google Fonts, and Google sees your IP address in the process, as it would for any file fetched from the internet.

If you become a client. Once we are building for you, we hold the words, photos, logins and business details you give us for the job. They stay inside Deliberate Design, are used only for your site, and are covered by our terms.

Who else sees your information

Only the services that make the site work. We do not sell your information, we do not trade it, and we do not hand it to anyone for their own marketing.

• Web3Forms passes contact form messages and ready-to-go website orders to our inbox
• Our own server, in a UK data centre, stores the sites sent to us through our editor
• Our card payment provider takes ready-to-go website payments on its own secure page
• Stripe and PayPal take payments in the shops we host, on behalf of each shop owner
• Our domain provider registers your web address in your name
• Google Analytics counts visits to the site
• Google Fonts serves the preview lettering inside our website editor only

How long we keep it

Messages you send us are kept in our email while they are still useful for answering you, and deleted when they are not. Analytics data is kept by Google for the standard retention period, which we have not extended. A site sent to us through our editor is kept for as long as we host it, and for 30 days after hosting ends in case you want it back. If you send a site and never go ahead, we delete it after 90 days.

Your rights

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it. We handle information in line with the Data Protection (Jersey) Law 2018, and for visitors in the United Kingdom, in line with UK GDPR as well. If you think we have got something wrong, please tell us first so we can fix it. You also have the right to complain to the Jersey Office of the Information Commissioner, or to the Information Commissioner's Office if you are in the UK.

Changes to this notice

If we change how any of this works, we will update this page and change the date at the top.