Your privacy matters to us. This policy explains what personal information we collect when you use our website or work with us, why we collect it, how we keep it safe and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Digital Chameleon Studio (“we”, “us”, “our”) is a web design, branding and digital marketing studio based in Newhaven, East Sussex, United Kingdom. We are the data controller for the personal information collected through this website and in the course of running our business.
If you have any questions about this policy or how we handle your information, please contact us:
- Email:info@digital-chameleon.co.uk
- Phone:01273 030067
- Location: Newhaven, East Sussex
2. Information we collect
Information you give us
When you fill in our contact form, email us, call us, message us on WhatsApp or social media, or book a free audit, we may collect:
- Your name, email address and phone number
- Your business name, website address and location
- Details about your project, goals and budget
- Any other information you choose to share with us
Information we collect when you become a client
- Billing and invoicing details
- Access details for websites, hosting, domains, Google or social media accounts that you share with us so we can deliver our services
- Content, images, logos and other materials you provide for your project
Information collected automatically
When you visit our website, we and our service providers may collect technical information such as your IP address, browser and device type, the pages you visit and how you arrived at our site. Where this involves non-essential cookies, we only do so with your consent (see section 5).
3. How we use your information
We only use your personal information where the law allows us to. The table below explains what we use it for and our lawful basis for doing so.
Purpose
Lawful basis
Responding to your enquiry, preparing quotes and carrying out free audits
Taking steps at your request before entering a contract; legitimate interests
Delivering our services and managing our working relationship with you
Performance of a contract
Invoicing, accounting, tax and record keeping
Legal obligation
Understanding how our website is used so we can improve it
Consent (via our cookie banner)
Sending occasional news, offers or updates about our services
Consent, or legitimate interests for existing clients. You can unsubscribe at any time
Protecting our business, website and legal rights
Legitimate interests; legal obligation
We will never sell your personal information.
4. Client data we handle on your behalf
When we build or manage a website, run advertising campaigns or manage social media accounts for a client, we may have access to personal information about that client’s own customers, such as enquiry form submissions, orders or messages. In these cases we act as a data processor on our client’s behalf, only process that information in line with their instructions and our agreement with them, and do not use it for any other purpose.
5. Cookies
Cookies are small text files stored on your device when you visit a website. We use:
- Essential cookies that are needed for the website to work properly and securely, and to remember your cookie choices.
- Analytics and marketing cookies that help us understand how visitors use our website and measure the performance of our advertising. These are only set if you accept them.
When you first visit our website, our cookie banner lets you accept or reject non-essential cookies. You can change your choice at any time using the cookie settings option on our website, or by adjusting your browser settings to block or delete cookies.
6. Who we share your information with
We only share your information where necessary, with trusted organisations that help us run our business, including:
- Website hosting, domain and email providers
- Accounting, invoicing and payment providers
- Google (for example Google Maps, Analytics, Ads and Business Profile) and Meta (Facebook, Instagram and WhatsApp) when you interact with us through those services or when we run campaigns on your behalf
- Print and production partners, when you order printed materials from us
- Professional advisers such as accountants, lawyers and insurers
- Regulators, law enforcement or other authorities where we are legally required to
These providers are only allowed to use your information to provide services to us and are required to keep it secure.
7. International transfers
Some of our service providers, such as Google and Meta, may store or process information outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum, so that your information remains protected.
8. How long we keep your information
- Enquiries that do not lead to work: up to 2 years from our last contact.
- Client records, including invoices and contracts: up to 6 years after our working relationship ends, to meet tax and legal requirements.
- Marketing preferences: until you unsubscribe or ask us to stop contacting you.
When we no longer need your information, we securely delete or anonymise it.
9. Keeping your information safe
We take appropriate technical and organisational measures to protect your personal information, including secure (HTTPS) connections on our website, password-protected systems, limiting access to those who need it and using reputable, security-focused service providers. While no online system can be guaranteed to be completely secure, we work hard to keep your information safe.
10. Your rights
Under UK data protection law, you have the right to:
- Access the personal information we hold about you
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete your information
- Ask us to restrict how we use your information
- Object to us using your information, including for direct marketing
- Ask for your information to be transferred to you or another organisation
- Withdraw your consent at any time, where we rely on consent
To exercise any of these rights, contact us at info@digital-chameleon.co.uk. There is usually no charge, and we will respond within one month.
11. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
12. Other information
Links to other websites
Our website contains links to other websites, including client websites in our portfolio and social media platforms. We are not responsible for the privacy practices of those websites, so please read their privacy policies.
Children
Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.