Privacy Policy

Digital XP (“we”, “us”) is the data controller responsible for the personal data described in this policy. We are based in the United Kingdom, and this policy is written to meet the UK GDPR and the Data Protection Act 2018.

• Email: info@digitalxp.co.uk

When you submit a quote request. The quote form asks for your name, email address, company name, and optionally your phone number. It also records the details you give us about the work: the services you're interested in, your description of the project, your budget range and timeline, your stated priorities, whether you hold quotes from other suppliers (and their price and scope, if you choose to share them), and how you heard about us.

When you email us. We receive whatever you put in the message, along with your email address.

When you sign an agreement with us. If we send you a contract to sign online, the signing page records your registered company name and number, your registered address, the name and position of the person signing, and an image of the signature they draw on screen. To confirm it is really you, we email a one-time code to the address the link was sent to, and we record when it was entered, the IP address it came from, and the browser used. That record is printed as an audit page on the signed PDF, because the point of it is to be shown — to you, and to anyone who ever needs to establish that the agreement was signed by whom it says.

Automatically. Our hosting provider records standard server logs, which include your IP address, browser user-agent, and the pages requested. These are used for security and reliability, not to build a profile of you.

• To respond to your enquiry and prepare a quote. Lawful basis: taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b)).
• To deliver work you engage us for, including follow-up correspondence. Lawful basis: performance of a contract (Article 6(1)(b)).
• To keep the site secure and available. Lawful basis: our legitimate interests in preventing abuse and diagnosing faults (Article 6(1)(f)).

We do not use your details for marketing unless you separately ask us to, and we do not carry out automated decision-making or profiling.

We keep the list of third parties deliberately short. Each one below acts as a processor on our behalf:

• Web3Forms, receives your quote form submission and delivers it to us by email.
• Google Firebase, serves this website, holds the server logs described above, and stores our client records and any signed agreements. Data is held in the European Union.
• Our email provider, delivers signing links, one-time codes and signed copies of agreements. It processes the recipient address and the contents of those emails, including the signed PDF where one is attached.

We never sell your personal data, and we do not share it with advertisers or data brokers. We may disclose information where we are legally required to.

Some of these providers operate outside the UK. Where personal data is transferred internationally, it is protected by UK adequacy regulations or by standard contractual clauses.

This website sets no cookies. We run no analytics, advertising pixels, session recording, or third-party tracking of any kind, and we do not use local storage to identify you. That is why you will not see a cookie banner here.

One practical exception: while you fill in the quote form, your answers are kept as a draft in your browser's session storage on your own device, so a refresh doesn't wipe the form. That draft never leaves your browser until you press Submit, and it is discarded when you close the tab.

We keep quote enquiries for up to 24 months from our last contact with you, so we can pick up a conversation that goes quiet and come back to it. If you become a client, we keep project correspondence and records for 6 years after the engagement ends, to meet UK accounting and tax requirements. After those periods we delete the data or anonymise it. Server logs are retained on a short rolling window by our hosting provider.

You can ask us to delete your enquiry sooner at any time; see below.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, where we have no overriding reason to keep it.
• Restrict or object to how we process your data.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, where we relied on consent.

To exercise any of these, email info@digitalxp.co.uk. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We'd appreciate the chance to put things right first.

This site is served over HTTPS, and form submissions are encrypted in transit. Access to enquiry data is limited to the people at Digital XP who need it to respond to you. No system is perfectly secure, but if a breach occurs that puts your rights at risk, we will notify you and the ICO as the law requires.

If we change how we handle personal data, we will update this page and revise the date at the top. Material changes affecting people who have already contacted us will be communicated by email.

Questions about this policy or your data are welcome at info@digitalxp.co.uk.