Last updated 2 November 2026
Privacy
This notice explains what personal information Northcut Studio collects, why, and what your rights are. It's written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Northcut Studio is a web design business run by Billy B, a sole trader based in South Yorkshire. We decide how your information is used, so in law we're the "controller". For anything about your data, email [email protected]. A postal address is available on request.
The short version
- This site sets no cookies and uses no analytics or tracking.
- The enquiry form sends what you type only when you press Send. Nothing is sent while you fill it in, and nothing is saved on the site.
- The price calculator works entirely in your browser. What you type isn't sent anywhere.
- If you email us, we use your details to reply and, if you become a client, to do the work and send invoices.
- We never sell your information or use it for advertising.
What we collect and why
When you visit the site
Our hosting company, Cloudflare, automatically handles technical information to deliver pages and protect the site from attacks, such as your IP address, browser type and the pages requested. We don't use it to identify you, and we don't add any tracking of our own. Lawful basis: legitimate interests, keeping the site working and secure.
When you email us or use the enquiry form
If you email us or press Send on the enquiry form, we receive your name, email address, and anything you write, such as your business name, town, current website and message. The form's message is passed by Cloudflare straight to our email inbox as an email; it isn't stored on the website. We use it to reply, to make your free concept if you've asked for one, and to keep a record of our conversation. Lawful basis: legitimate interests in answering enquiries, or taking steps at your request before entering into a contract.
If you become a client
We keep your name, business name, address, email, phone number (if you give it), what we've agreed, invoices and payments, and the files and logins you send us for your website. Lawful basis: performing our contract with you, and our legal obligation to keep tax and accounting records.
Your customers' information
If we build or host a website for you that collects your customers' details (such as a contact form), you're responsible for that data and we only handle it on your instructions. Your own privacy notice should cover it.
Who we share it with
Only the services we need to run the business, each bound to protect your data:
| Who | What for | Where |
|---|---|---|
| Cloudflare | Website hosting, security, domain and DNS, and delivering enquiry form messages and email to our inbox | Global network; certified under the UK Extension to the EU-US Data Privacy Framework |
| Fastmail | Our email ([email protected]) | Based in Australia, stores mail in the US, under standard data protection contract terms |
| Google (Gmail) | The inbox our website email and enquiry form messages are forwarded to | Based in the US; certified under the UK Extension to the EU-US Data Privacy Framework |
| Anthropic (Claude) | An AI assistant that reads, sorts and answers routine email for us. Anything about prices, contracts, invoices or complaints is checked by Billy B before it's sent | Based in the US; see its privacy policy for how it protects data |
| Our bank | Business banking and receiving payments | UK |
| HMRC, and an accountant if we use one | Tax | UK |
We'll also share information if the law requires it. We never sell or rent personal information. When information is handled outside the UK, we only use providers covered by UK adequacy regulations or the UK's standard data protection safeguards.
How long we keep it
- Enquiries that don't become work: deleted within 12 months of our last contact.
- Client records, contracts and invoices: kept for 5 years after the 31 January tax return deadline for the year they relate to (so up to about 7 years), because tax law requires us to keep business records.
- Website files and logins you send us: kept while we work on or host your site, then returned or deleted within 3 months of our work ending. Ask us to delete logins at any time.
- Cloudflare's technical logs: kept by Cloudflare for a short time under its own policies.
Your rights
You have the right to ask for a copy of the information we hold about you; ask us to correct anything that's wrong; ask us to delete your information (unless we must keep it, for example for tax); object to us using it on the basis of legitimate interests, or ask us to restrict how we use it; and ask for information you gave us in a format you can take elsewhere. Email [email protected] to use any of these. It's free, and we'll reply within one month.
Complaints
Please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Links to other sites
Our work section links to client websites, such as Surge Supplements. Those sites have their own privacy notices; we're not responsible for them.
Changes
If we change how we use your information, we'll update this page and the date at the top.