1. Who We Are

Untitled Digital Limited ("we", "us", "our") is a UK-based web design and development studio. We are the data controller for the personal data collected through this website.

If you have questions about this policy or your personal data, please contact us at hello@untitleddigital.com.

2. Data Minimisation

We only collect personal data that is necessary for the purposes outlined in this policy. We do not collect more information than we need, and we do not use your data for purposes beyond those described here.

3. What Data We Collect

When you use our website, we may collect the following information:

Contact Form Submissions

When you submit our contact form, we collect:

• Your name
• Email address
• Company name (optional)
• Service you are interested in
• Your message

Automatically Collected Data

We use Google Analytics to understand how visitors interact with our website. This may collect:

• Pages visited and time spent on site
• Referring website or source
• Browser type and device information
• Approximate geographic location (country/city level)
• IP address (anonymised)

Google reCAPTCHA

We use Google reCAPTCHA on our contact form to prevent spam. reCAPTCHA may collect hardware and software information, such as device and application data, and send it to Google for analysis. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

4. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal data. The bases we rely on are:

• Legitimate interests — for processing contact form submissions in order to respond to your enquiry and manage our business relationship. We have assessed that this processing is necessary for our legitimate interests and does not override your rights and freedoms.
• Consent — for placing Google Analytics cookies on your device. You can withdraw consent at any time by adjusting your cookie settings or browser preferences.
• Legitimate interests — for using Google reCAPTCHA to protect our website from spam and abuse. This processing is necessary for the security of our website and is minimally intrusive.

5. How We Use Your Data

We use the information we collect to:

• Respond to your enquiries and provide the services you have requested
• Improve our website and services
• Protect our website from spam and abuse

We do not sell, trade, or share your personal data with third parties for marketing purposes. We do not use your data for automated profiling or direct marketing.

6. How We Store and Protect Your Data

Contact form submissions are stored securely in our database. We take appropriate technical and organisational measures to protect your data, including:

• HTTPS/TLS encryption for all data transmitted between your browser and our website
• Secure, access-controlled database storage
• Restricted access to personal data, limited to team members who require it to respond to enquiries
• Regular review of our security practices

7. Cookies

Our website uses cookies. A cookie is a small text file placed on your device by a website to store information about your browsing activity.

Strictly Necessary Cookies

These cookies are essential for the website to function and do not require your consent:

• Session cookie (first-party) — maintains your session while browsing the site. Expires when you close your browser.
• XSRF-TOKEN (first-party) — protects against cross-site request forgery. Expires when you close your browser.

Analytics Cookies

These cookies help us understand how visitors use our website. They are only set with your consent:

• _ga (third-party, Google) — distinguishes unique visitors. Expires after 2 years.
• _ga_* (third-party, Google) — maintains session state for Google Analytics. Expires after 2 years.

reCAPTCHA Cookies

These cookies are used by Google reCAPTCHA to distinguish human visitors from automated bots:

• _GRECAPTCHA (third-party, Google) — provides spam protection. Expires after 6 months.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our contact form. For more information about cookies, visit aboutcookies.org.

8. Data Retention

We retain contact form submissions for as long as necessary to respond to your enquiry and for legitimate business purposes. Where no ongoing business relationship exists, we will delete contact form data within 24 months of our last correspondence.

Google Analytics data is retained in accordance with Google's data retention settings. You may request deletion of your data at any time by contacting us.

9. Third-Party Services

Our website uses the following third-party services, which may process your data:

• Google Analytics — website analytics. Google may access anonymised browsing data, IP addresses, and device information. (Google Privacy Policy)
• Google reCAPTCHA — spam prevention. Google may access device and interaction data for bot detection. (Google Privacy Policy)

These third-party services process data only to the extent required to perform their functions. We do not permit them to use your data for any other purpose.

10. International Data Transfers

The third-party services we use (Google Analytics and Google reCAPTCHA) are operated by Google LLC, which is based in the United States. This means your data may be transferred to and processed in countries outside the United Kingdom.

Where such transfers occur, they are protected by appropriate safeguards, including Google's compliance with recognised data transfer mechanisms and their commitment to data protection standards. For more information, see Google's data transfer frameworks.

11. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

• Be informed — know how your personal data is being used, as set out in this policy
• Access — request a copy of the personal data we hold about you, free of charge
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we use your data
• Portability — request a copy of your data in a portable format
• Objection — object to our processing of your data
• Automated decision-making — not be subject to decisions based solely on automated processing (see Section 13)

To exercise any of these rights, please contact us at hello@untitleddigital.com. We will respond within one calendar month. In complex cases, we may extend this by a further two months, but we will inform you if this is necessary.

12. Right to Withhold Information

You are free to browse our website without providing any personal data. Personal data is only collected when you voluntarily submit our contact form. If you choose not to provide the required information, you will still be able to browse the website but may not be able to submit an enquiry.

13. Automated Decision-Making

Our website uses Google reCAPTCHA, which may automatically assess whether a form submission is from a human or an automated bot. If reCAPTCHA determines that an interaction is likely automated, your form submission may be blocked. This processing is necessary to protect our website from spam and abuse. No other automated decision-making or profiling takes place.

14. Children's Data

Our website and services are directed at businesses and are not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

15. Business Ownership Changes

In the event that Untitled Digital Limited is sold, merged, or transfers part of its business, your personal data may be transferred as part of that transaction. Where reasonably practicable, we will notify you in advance and give you the opportunity to request deletion of your data before any transfer takes place.

16. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

17. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at hello@untitleddigital.com.

18. Contact Us

If you have any questions about this privacy policy or wish to exercise your data rights, please get in touch via our contact form.