Privacy notice

Last updated: 24 October 2026

Who we are

This website is run by Advent Digital, a business run by a self-employed sole trader in the United Kingdom. We are the data controller for the personal information described here. That means we decide how and why it is used.

For any question about your personal information, write togdpr@adventdigital.co.uk.

We are registering with the Information Commissioner's Office (ICO) and will add our registration number here once it is issued. We have not appointed a data protection officer, because the law does not require one for a business of our size and type.

What we collect

When you send us a request

Our forms ask for your name, email address and website address, and, depending on the form, the platform your shop is on, what you would like help with and a message. You choose what to put in the message, so please do not include anything sensitive. We also record which form you used, the page you sent it from and when.

To stop spam and abuse, we keep a short-lived, one-way scrambled (hashed) version of your IP address so we can limit how many requests are sent from one place. We cannot turn it back into your IP address, and it is deleted within 3 days.

When you visit the website

We use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies or store anything on your device, and it does not track you across other websites. We do not use it to identify you.

Email and calls

If you write to us or we speak on a call, we keep a record of what you told us, such as emails and call notes, so we can help you.

Why we use it, and our legal basis

The law says we must have a reason, called a lawful basis, for using personal information.

Answering your request. We use your details to reply, arrange a call, prepare an audit or review, and give you a quote. This is either a step you ask us to take before a contract, or our legitimate interest in answering people who contact us.
Doing the work you hire us for. If you become a client, we use your details to deliver and invoice the work. This is necessary for our contract with you.
Keeping the site safe. We use the hashed IP address described above to prevent spam and abuse. This is our legitimate interest.
Understanding how the site is used. We use basic traffic figures to improve the site. This is our legitimate interest.
Keeping records. We keep some information for tax and accounting. This is a legal obligation.

We do not send marketing emails. If that changes, we will only send them to people who have agreed, and every email will have a way to unsubscribe.

Who we share it with

We do not sell your personal information. We share it only with the companies that help us run our business, and only so they can do that job for us.

Cloudflare, which hosts this website, receives and stores form submissions in its database service, and provides Web Analytics.
Resend, which sends the emails that confirm your request and alert us to it.
Our email, calendar and video call providers (Gmail or Fastmail for email, Google Calendar and Google Meet), which we use to reply to you and hold calls.
GitHub, which stores the code and written content of this website. It does not hold form submissions.
Google Tag Manager and Google Analytics 4 (GA4). We may add these later. They are not in use today. Before we turn them on, we will update this notice and our cookie notice, and ask for your consent where the law requires it.

We may also share information if the law requires it, or with our professional advisers, such as an accountant.

International transfers

Some of these providers are based in, or use systems in, the United States and other countries outside the UK. Where your information leaves the UK, we rely on a safeguard the law recognises, such as UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework) or the ICO's International Data Transfer Agreement or Addendum, which the provider signs.

How long we keep it

We keep personal information only as long as we need it for the reason we collected it.

Form submissions and emails from people who do not become clients: 24 months from when you sent them, then deleted automatically.
Records of work, quotes and correspondence with clients: for 6 years after the work ends, in case of questions or claims.
Accounting records: for as long as HMRC requires, which is at least 5 years after the 31 January deadline for the tax year they relate to.
The hashed IP address used to prevent spam: deleted within 3 days.
Website analytics: Cloudflare keeps these as anonymous totals, not linked to you.

You can ask us to delete your details sooner, unless we need to keep them for a legal reason.

How we keep it safe

Access to form submissions is limited to us and protected by sign-in checks. We use providers with strong security and send information over encrypted connections.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal information we hold about you
ask us to correct anything that is wrong
ask us to delete your information, in some cases
ask us to limit how we use it, in some cases
object to us using it, in some cases
ask for it in a portable format, in some cases
withdraw your consent at any time, where we rely on it

To use any of these rights, email gdpr@adventdigital.co.uk. We will reply within one month, and there is usually no charge.

Complaints

If you are unhappy with how we have used your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) atico.org.uk/make-a-complaint.

Children

This website is for businesses. It is not aimed at children, and we do not knowingly collect their information.

Changes to this notice

We will update this page if we change how we use personal information, for example when we add new analytics tools. The date at the top shows when it was last updated.