Privacy policy

01. Who we are

South Digital Ltd is a web design and development studio.

Legal entity

South Digital Ltd

Company number

11859310

VAT number

GB396566634

ICO registration

ZA531336

Registered in

England and Wales

Registered office

Unit 8 The Courtyard, Gaulby Lane, Stoughton, Leicester, LE2 2FL

Email

hello@south.digital

Phone

0800 170 0171

02. Controller and processor

For this website we are usually the data controller. Where we manage data inside a client project, we act as a data processor on that client’s instructions.

03. What this policy covers

This policy applies when you visit our website, submit a form, book a call, communicate with us or work with us as a client, supplier or partner. It does not cover third-party websites we link to; each has its own policy.

04. The information we collect

• Information you give us directly: contact details, project information, billing details, content files and our communication history.
• What you send through an enquiry form: your name, email address and message; your website and the services you tick, where the form asks for them; and, on the quote form, your optional budget and how you heard about us.
• How you found us, sent with an enquiry: the website that linked you here, reduced to its domain (for example https://www.google.com, never the page address or your search terms), and any campaign tags in the link you followed (utm_source, utm_medium and utm_campaign), with anything that looks like an email address removed. We also note which page you sent the enquiry from. Nothing is stored on your device to do this.
• Technical data when you visit: like any website host, Vercel receives your IP address (the number that identifies your internet connection), browser details and the address of each page you request, so it can deliver this website and protect it from attacks. It keeps these requests in its logs for a limited period, and we use them only to keep the website running and secure.
• Spam protection: Vercel applies a rate limit to enquiry requests by IP address. The enquiry server also counts how many times the form is sent from each IP address in 10 minutes. It counts a scrambled code made from the address, not the address itself, keeps it only in temporary memory, and the count expires after 10 minutes. Neither your IP address nor the code is added to your enquiry or to the enquiry form’s own log messages.
• Usage data: if you accept analytics cookies, Google Analytics 4 measures page visits and enquiry events through Google Tag Manager. It receives technical information such as browser/device details and approximate location. We do not send form contents, names or email addresses to analytics. You can reject analytics or withdraw your choice through Preferences.
• Information from others: booking details from Cal.com when you book a call, company and professional information from Apollo, and data a client shares with us for a project.

05. Enquiries and booked calls

When you send an enquiry, it is processed by our website host, Vercel, whose functions for this site run in London, and stored in our Supabase operations database and sent to our team in Slack. To prepare for our first conversation, we may add publicly available information about your company from Apollo.

We rely on our legitimate interests in replying to you, understanding your project and seeing how people find us. We keep enquiries for up to two years after our last interaction, and we won’t add you to marketing emails without your consent.

If you book a call, you do so on Cal.com, our scheduling provider. It receives the details you enter there and the time you choose, and shares them with us so we can hold the call. Cal.com’s own privacy policy also applies to its booking pages.

06. How we use it and why

Under UK and EU data protection law, each use of personal information needs a legal basis. We do not sell your personal information.

• Replying to enquiries and preparing for a first conversation: our legitimate interests.
• Noting how people find us, from the details sent with an enquiry: our legitimate interests.
• Delivering this website, and protecting it and our forms from abuse: our legitimate interests.
• Measuring visits and enquiry events with Google Analytics: your consent, which you can withdraw through Preferences.
• Preparing proposals and delivering the work you ask for: our contract with you, or steps you ask us to take before one.
• Invoicing, accounting and tax records: our legal obligations.
• Sending updates you have opted into: your consent, which you can withdraw at any time.

07. Who we share it with

We share personal information only where it is needed: with the service providers below, with clients where a project requires it, with professional advisers, and with authorities where the law requires it. We do not sell personal information to anyone.

• Vercel, which hosts this website and runs its enquiry form.
• Supabase, our operations database.
• Slack, where our team receives website enquiries.
• Cal.com, which handles call bookings.
• Google Workspace, which handles our email.
• Apollo, for company and professional information used to prepare for an enquiry.
• Google, which provides Google Tag Manager and Google Analytics 4 after you accept analytics.

08. International transfers

Some of the providers named above may store or process data outside the UK and EEA, including enquiries, emails and booking details. Where data leaves those regions we rely on adequacy decisions, standard contractual clauses or equivalent protections.

09. How long we keep it

• Enquiry data: up to two years after our last interaction.
• Project records: up to six years after a project completes.
• Financial records: for the periods tax law requires.
• Website request logs: a limited period set by Vercel’s log retention.
• The enquiry server’s spam-protection counts: 10 minutes, in temporary memory only. Vercel also keeps security request logs under its log-retention settings.

10. Security

We use secure devices, access controls, reputable providers and regular updates. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. Our Security page describes how this website itself is built and served.

11. Your rights

You may ask to access, correct or delete your personal information, restrict how we use it, object to uses based on our legitimate interests, or receive your data in a portable form. Where we rely on your consent, you can withdraw it at any time; this does not affect anything we did before you withdrew it. To exercise any of these rights, email hello@south.digital.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

12. Cookies

This site remembers your theme and analytics choices. Google Analytics cookies are set only after you accept analytics. The Cookie policy explains how to change your choice and remove cookies.

13. Children

We do not intentionally collect personal information from anyone under 16. If you believe we have, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. Material changes are communicated by a notice on this website, and the date at the top of this page always reflects the current version.

15. Contact

Questions about this policy or your data reach us at hello@south.digital or on 0800 170 0171.