Privacy policy

Last updated: 6 November 2026

This policy explains what personal data I collect when you use this website or get in touch, why I need it, and the rights you have. I've kept it short and in plain English. If anything isn't clear, just ask.

Who I am

Pixel Witch Digital is a one-person web studio based in County Durham, run by me, Victoria. I decide how your personal data is used, which makes me the "controller" under UK data protection law.

• Trading name: Pixel Witch Digital
• Email:info@pixelwitchdigital.co.uk

What I collect and why

When you use the contact form

• What: your name, email address and message, what you need help with, and, if you choose to give them, your business name and current website.
• Why: to reply to your enquiry and, if you'd like to go ahead, to prepare a quote.
• Lawful basis: legitimate interests (replying to people who contact me). When you ask me for a quote, I also rely on taking steps at your request before we enter into a contract.
• How long I keep it: 12 months after we were last in touch, if we don't end up working together. If you become a client, I keep your details for as long as we work together and then for 6 years, for my tax and business records.

When you email me directly I treat your email in the same way as a contact form message, for the same reasons and for the same length of time.

When you request a free consultation

• What: your name, email address, business name and what your business does, how you'd like to meet, and the days and times that suit you. If you choose to give them: your website, other online platforms you use, your phone number and what you'd like to talk about.
• Why: to arrange your consultation and prepare for it. Before we talk, I'll look at the public website and social media pages you tell me about.
• Lawful basis: taking steps at your request before we enter into a contract, and legitimate interests (preparing for a meeting you asked for).
• How long I keep it: the same as contact form messages. That's 12 months after we were last in touch, or 6 years if you become a client.

When you visit the website This website doesn't use analytics, advertising or tracking cookies. To show you the pages and keep the site secure, my website host, Webflow, processes basic technical information such as your IP address and browser type. I don't use this information to identify you. Lawful basis: legitimate interests (running a secure website). Webflow keeps it under its own retention rules.

I don't sell your data, I don't add you to a mailing list, and I don't make automated decisions about you.

Who I share it with

I use a small number of services to run this website and handle enquiries:

• Webflow, Inc. hosts this website and receives contact form messages. It stores each message and emails me a copy. Webflow also checks form messages for spam.
• Cloudflare, Inc. runs a spam check (called Turnstile) on the contact form, to make sure messages come from a real person. When you open the contact page, it sees your IP address and some details about your browser and device. It doesn't set cookies, but it does save a small item in your browser's local storage (see the cookie policy). I don't use this information for anything else. Lawful basis: legitimate interests (keeping the contact form free of spam).
• Microsoft provides my business email (Microsoft 365 and Outlook) for info@pixelwitchdigital.co.uk, and Microsoft Teams, which I use for video consultations. Contact form messages and emails you send me are stored in my inbox. Microsoft processes this data for me under its business data protection terms.
• Anthropic makes Claude, an AI assistant I use to help plan and write your project. I only share business information with it, such as your business name, what you do and your website. I don't put your name, email address, phone number or other personal contact details into it.
• Tally runs my project questionnaire, if you decide to go ahead with a project.

I'll only share your data with anyone else if the law requires me to.

International transfers

Webflow, Microsoft, Cloudflare and Anthropic are based in the USA, so your data may be stored or processed there. These transfers are protected by the UK–US Data Bridge or the International Data Transfer Agreement. Tally is based in the EU (Belgium), which the UK recognises as giving equivalent protection.

How I keep it safe

I use two-step verification on my accounts and only use services with good security. Form messages travel over a secure (HTTPS) connection. I delete enquiries from Webflow and from my inbox when the retention period ends.

Your rights

You have the right to:

• see the personal data I hold about you
• have it corrected if it's wrong
• have it deleted
• restrict or object to how I use it
• receive it in a format you can take elsewhere

To use any of these rights, email info@pixelwitchdigital.co.uk. It's free, and I'll reply within one month.

Cookies

This website doesn't use any optional cookies, and there's no tracking or advertising. If that ever changes, I'll ask you first. See the cookie policy for details.

Complaints

If you're unhappy with how I've handled your personal data, please tell me first at info@pixelwitchdigital.co.uk. I'll acknowledge your complaint within 30 days and let you know the outcome without undue delay.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

• online at ico.org.uk/make-a-complaint
• by phone on 0303 123 1113

Changes to this policy

If anything changes, I'll update this page and the date at the top.