Legal

Privacy policy

Mercian Digital is a sole trader business. This policy explains how personal information is used when you contact the business, request a quote or become a client.

Information collected

Information may include your name, business name, email address, website address, business type, project details, budget range, desired launch date, hosting preference, correspondence, project records and information needed for invoicing or service delivery.

Why information is used

Enquiry information is used to respond to you, assess and scope potential work, prepare proposals, prevent form abuse and keep appropriate business records. Client information is also used to perform contracts, deliver services, administer payments and meet legal obligations.

Lawful bases

Depending on the context, processing is based on legitimate interests in responding to business enquiries and operating Mercian Digital, steps taken at your request before entering a contract, performance of a contract, and compliance with legal obligations.

Contact form processors

The website is hosted on Cloudflare Pages. Contact-form security uses Cloudflare Turnstile. Form submissions are processed by a Cloudflare Pages Function and sent by email using Resend. No separate CRM or contact-form database is used at launch.

Data sharing and international transfers

Information is shared only where needed to run the website and provide services, including relevant hosting, security, email and professional-service providers. Some providers may process data outside the United Kingdom. Where applicable, transfers are handled using the safeguards and contractual arrangements made available by those providers under UK data-protection law.

Retention

Unsuccessful or inactive enquiry information is normally retained for up to 12 months after the last contact. Information connected with an active client relationship may be retained for longer where needed for contractual, accounting, tax, legal or business-record purposes.

Security

Reasonable technical and organisational measures are used to protect personal information. Website secrets and email credentials are not stored in public frontend code.

Your rights

Under UK data-protection law, you may have rights to access, correct, erase or restrict personal information, object to certain processing, and request data portability where applicable. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

ICO registration

Mercian Digital is not currently registered with the ICO and does not claim an ICO registration number on this website.

Changes

This policy may be updated when services, processors or legal requirements change. Last updated: 25 September 2026.