1. Data controller
Storeton Digital Limited
Company no. 16577246 (England & Wales)
Email: admin@storetondigital.com
When we say "we", "us" or "our" in this policy, we mean Storeton Digital Limited.
2. What we collect
We collect personal data only when you voluntarily provide it. This includes:
- Contact form submissions — your name, email address, phone number, company details and any other information you choose to include in your enquiry.
- Bot-protection tokens — Cloudflare Turnstile generates a token when you submit a form. This is used solely to verify you are a real person and does not identify you personally.
We do not use cookies for analytics or tracking. We do not run any advertising trackers on this site.
3. How we use your data
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to your enquiry or brief | Legitimate interest / pre-contractual steps (Art. 6(1)(b)–(f)) |
| Spam and bot protection (Turnstile) | Legitimate interest (Art. 6(1)(f)) |
| Sending you a quote or follow-up | Consent / legitimate interest (Art. 6(1)(a)–(f)) |
We will never sell, rent or share your personal data with third parties for marketing purposes.
4. Third-party services
We use the following services that may process limited data:
- Cloudflare Turnstile — bot protection on our contact form. Cloudflare may process your IP address and browser metadata to issue a challenge token. See Cloudflare's privacy policy.
- Google Fonts — we load typefaces from Google's servers. Google may log your IP address when fonts are requested. See Google's privacy policy.
- Netlify — our hosting provider. Netlify processes server logs that may include IP addresses. See Netlify's privacy policy.
5. Data retention
We keep contact form submissions for up to 24 months from the date of your enquiry, or for the duration of any project engagement plus 12 months, whichever is longer. After this period, your data is securely deleted.
6. Data security
All data is transmitted over HTTPS. Form submissions are delivered to us via encrypted channels. We restrict access to personal data to authorised personnel only.
7. Your rights
Under the UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Portability — request your data in a structured, machine-readable format.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, email us at admin@storetondigital.com. We will respond within 30 days.
8. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the
Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
9. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.