The short version: I only collect what I need to reply to you, run the Doubt Test, and deliver your project. I don’t sell your information, I don’t use advertising trackers, and you can ask me to see or delete what I hold at any time.
Who I am
I’m Sarah J Hill, a web designer and developer working as a sole trader (Sarah J Hill, also trading as Dragon Fire Design), based in Cardiff, Wales. I’m the “data controller” for the information described here. Questions or requests: sarah@sarahjhill.com.
What I collect, and why
When you email me
Your name, email address and whatever you choose to tell me. I use it to reply and, if you ask, to talk about working together. Lawful basis: legitimate interests, or steps you’ve asked for before a contract.
The project enquiry form
Your name, role, email, phone (optional), organisation, current website, and your answers about your project, budget and timings. I use them to decide whether I can help and to prepare a quote and plan. The form is sent through Formspree, which delivers it to my inbox. Lawful basis: steps you’ve asked for before entering a contract.
The Doubt Test
The website address you want checked, plus your name and email. I use them to run the check, show and send your score and report, and get in touch about it, which you agree to when you submit the form. If you also tick the separate box for tips, I’ll occasionally email you advice on getting taken seriously online. That box is never ticked for you, and every tips email lets you unsubscribe. Lawful basis: consent (you can withdraw it at any time by emailing me or unsubscribing).
Working together
If you become a client, I keep your contact details, our messages, the files and content you share, your project page, and invoices and payment records. Lawful basis: to perform our contract, and to meet my legal obligations such as tax records.
Buying a theme
If you buy one of my Ember themes, payment is handled by Stripe. I never see your full card details. I receive your name, email and what you bought, so I can send it and support you. Lawful basis: to perform our contract, and legal obligations (tax).
Visitor statistics
I use Cloudflare Web Analytics to count visits and see which pages are useful. It doesn’t use cookies, doesn’t follow you around other websites and doesn’t build a profile of you. I only see totals, such as page views, rough country and type of device. Lawful basis: legitimate interests, to keep the site useful.
Cookies and storage on your device
This site doesn’t set advertising or tracking cookies. It saves two tiny preferences in your browser’s own storage, which never leave your device:
- whether you prefer the portfolio as a list or a game on the homepage, and
- that you closed the Doubt Test box on a blog post, so it stays closed for 14 days.
You can clear them any time in your browser settings.
Who helps me look after it
I use a small number of trusted services to run my business. They only process your information on my instructions:
- Google Workspace: my email.
- Formspree: delivers the project enquiry form.
- Heroku (Salesforce): hosts the Doubt Test and its database, in the EU.
- Cloudflare: visitor statistics and domain services.
- GitHub Pages: hosts this website. Like any web host, it sees your IP address when it sends you a page.
- jsDelivr: delivers the code for the 3D dragon, which also means it sees your IP address.
- Stripe: theme payments.
Some of these companies are based in the USA. Where your information leaves the UK, they protect it with safeguards approved under UK law, such as the UK–US data bridge or standard contract clauses.
I never sell your information or share it with anyone for their own marketing. I’ll only pass it on if the law requires it.
How long I keep it
- Enquiries and Doubt Test results that don’t turn into a project: up to 12 months, then deleted.
- The tips list: until you unsubscribe.
- Client and purchase records: 6 years after the project or sale ends, because HMRC requires it.
Your rights
You can ask me to:
- give you a copy of the information I hold about you,
- correct anything that’s wrong,
- delete it,
- stop or limit how I use it, or object to it,
- send it to you or someone else in a usable format, and
- withdraw your consent, for example to tips emails.
Just email sarah@sarahjhill.com. It’s free and I’ll reply within one month. If you’re not happy with how I’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. I’d appreciate the chance to put it right first.
Changes
If I change how I use your information, I’ll update this page and the date at the top.