This explains what I do with your details when you visit this website or get in touch. I've kept it short and in plain English.
Who I am
I'm James Tandy, trading as JTANDY. I'm responsible for your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can reach me at James.Tandy@jtandy.com.
What I collect
- What you type into a form on this site: usually your name, phone number, email address, your trade, what you need help with, your website and anything else you choose to tell me.
- Your emails, calls and messages with me, if you contact me directly.
- If you become a client, what I need to do the work and keep my accounts, such as invoices and logins you share with me.
- If you accept cookies, how you use this site and which advert brought you here, measured by Google Analytics, Google Ads and the Reddit and OpenAI ad pixels. The cookie policy explains each one.
I don't ask for sensitive information, and please don't send it.
Why I use it, and my legal basis
- To reply to your enquiry and give you a quote, because you've asked me to (steps before a contract, UK GDPR Article 6(1)(b)).
- To do the work you hire me for, under our contract (Article 6(1)(b)).
- To follow up on an enquiry you've made, a few times at most, because it's reasonable for a small business to check you got its reply (legitimate interests, Article 6(1)(f)). Tell me to stop and I will, straight away.
- To keep my accounts and meet my legal duties, such as tax records (legal obligation, Article 6(1)(c)).
- To see which pages and adverts bring enquiries, only if you accept cookies (consent, Article 6(1)(a)). You can withdraw it at any time on the cookie policy page.
- To count visits without cookies, so I know the site is working (legitimate interests, Article 6(1)(f)). This doesn't identify you.
I never sell your details, and I won't add you to a mailing list unless you ask to join one.
Who else sees it
Only me, plus the services I use to run the business, which handle your details on my behalf: my email provider, Vercel, which hosts this website, and Resend, which delivers the forms on this site to my inbox. If you accept cookies, Google, Reddit and OpenAI also receive details of your visit, as the cookie policy explains. Otherwise everything on this site, fonts included, is served from this site itself, so no other company sees your visit.
Some of these providers may store data outside the UK. Where they do, I only use providers that protect it to UK standards, for example under the UK's adequacy rules or approved contract terms.
How long I keep it
If you get in touch but don't go ahead, I delete your details within 12 months. If you become a client, I keep what I need for the work and for my accounts, which for tax records is usually 6 years after the end of the tax year.
Your rights
You can ask me for a copy of the details I hold about you, ask me to correct or delete them, ask me to limit how I use them, or object to how I use them. Email me and I'll reply within one month. It's free.
Cookies
This site only uses cookies that measure visits and adverts if you accept them, and works just the same if you don't. The cookie policy lists them and lets you change your choice.
Complaints
If you're unhappy with how I've handled your details, please email me first and I'll put it right if I can. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If I change how I use your details, I'll update this page and the date at the top.