Who is responsible for your information?
Vellum Digital is the trading name of David Rick, a sole trader and the data controller for the personal information described in this notice.
Contact: hello@vellumdigital.co.uk
Information we may collect
Depending on how you contact or work with us, this may include:
- your name, email address, telephone number and preferred contact method;
- your business name, industry and website address;
- project requirements, budgets, timings and correspondence;
- proposal, contract, invoice and payment records if you become a client; and
- limited technical information produced through website hosting, such as IP address, request details, browser information and security logs.
Please do not include sensitive personal information in an enquiry unless it is genuinely necessary.
How information reaches us
When you submit an enquiry form, the details are sent securely to Vellum Digital’s business email account so that we can respond. The website does not create a customer account or keep a separate enquiry database.
We may also receive information when you contact us directly, request a quotation, enter into a contract or otherwise communicate during a project.
Why we use it
We do not currently operate a marketing mailing list. An enquiry will not place you into an automated sales or marketing sequence.
Who may process it
We use trusted service providers where needed to run the business:
- Cloudflare for website hosting, delivery and security;
- Zoho for business email; and
- Google Fonts to deliver the website’s typefaces, which may receive technical request information such as an IP address.
Information may also be disclosed to professional advisers or public authorities where reasonably necessary or legally required. We do not sell personal information.
International processing
Some service providers may process information outside the UK. Where that happens, we rely on the provider’s applicable legal transfer mechanism and contractual safeguards.
How long we keep it
- Enquiries that do not become projects are normally kept for no more than 12 months.
- Client, project, contractual and financial records may be retained for up to six years after the relationship ends where needed for tax, accounting or legal purposes.
- Security and technical logs are retained according to the service provider’s operational schedule and only for as long as reasonably needed.
Information may be deleted earlier where it is no longer required, or retained longer where the law requires it.
Your rights
Depending on the circumstances, you may have rights to access, correct or erase your personal information; restrict or object to its use; and receive certain information in a portable format. Where processing relies on consent, you may withdraw that consent at any time.
To exercise a right, email hello@vellumdigital.co.uk. We may need to confirm your identity before acting on a request.
Concerns and complaints
Please contact us first so we can try to resolve any concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this notice
We may update this notice when our services, suppliers or legal obligations change. The latest version will always appear on this page with its revision date.
