Privacy policy
The short version: I only collect what you choose to send me, I use it to reply to you and do the work, and I never sell it or add you to a marketing list.
Last updated: September 2026
Who I am
Castleberg Digital is a web design and hosting business based in Settle, North Yorkshire, run by one person, me. For anything in this policy, contact [email protected].
What I collect, and why
Apart from the optional analytics described below, this site only collects information you type in yourself:
- Contact form: your name, email, phone number (optional) and message. Used to reply to you, nothing else.
- Quote form: your name, email, phone number (optional) and what you tell me about your business and project. Used to prepare your quote and recommendation.
The legal basis for this under UK GDPR is “steps taken at your request before entering a contract”. In plain English: you asked me something, so I use your details to answer.
If you say yes to the cookie question, Google Analytics records your visit: which pages you looked at, roughly where from, and on what kind of device, so I can see what’s useful. The legal basis for that is your consent, and you can withdraw it any time with Change your cookie choice at the bottom of any page. Say no and nothing is sent to Google Analytics. There are no advertising pixels and no marketing list. The cookie policy has the detail.
Who else touches your data
A few carefully chosen services help run this site. Each receives only what it needs:
- Resend turns the contact and quote forms into an email in my inbox. The forms are part of this site, not a third-party embed, and nothing you type is stored on the site itself. Resend is a US company, so your enquiry is processed in the US under their data transfer safeguards (their privacy policy).
- Cloudflare Pages hosts this site and, like all web hosts, keeps standard server logs (IP address, pages requested) for security (their privacy policy).
- Google Analytics: only if you say yes to the cookie question. It’s run by me, Castleberg Digital, on my own Google account, and Google processes the data, including in the US (their privacy policy).
- WhatsApp: only if you choose to message me there. It’s run by Meta, and your number and messages are handled under its own terms (their privacy policy).
- Google Fonts serves this site's typefaces, which involves your browser requesting font files from Google's servers (their privacy policy).
I never sell your information, and I don't share it with anyone beyond the services above.
How long I keep it
Enquiries that don't become projects are deleted within 12 months. If you become a client, I keep project correspondence for the length of our work together plus 6 years (the UK limitation period for contract records), then delete it.
Your rights
Under UK GDPR you can ask me at any time to:
- show you the personal data I hold about you;
- correct it if it's wrong;
- delete it;
- stop processing it, or hand it over to you in a portable format.
Email [email protected] and I'll sort it, no forms, no fuss. If you're not happy with how I've handled something, you can complain to the Information Commissioner's Office.
Changes
If how this site handles data changes, this page changes first, and the date at the top moves.
See also: cookie policy · terms of use