Privacy notice.
Updated 11 November 2026.
Who is responsible
Luke Atkinson, operating as Atkinson Digital, is responsible for the personal information collected through this website. Contact luke@atkinsondigital.co.uk with any privacy question or request.
What we collect and why
When you enquire, we receive your name, email, optional business name, chosen service and project message. We use them to respond, prepare a proposal and manage the conversation. Please do not include sensitive information. These details come directly from you. Providing them is voluntary, but we cannot reply without a contact address and enough information about your request.
We rely on taking steps at your request before entering a contract where you are the prospective customer. For business representatives and general questions, we rely on our legitimate interest in handling business enquiries. Security controls use a short-lived pseudonymous network identifier to limit spam. Our hosting provider may process IP addresses and technical request logs to operate and protect the service.
Who receives it
Access is limited to Luke and service providers needed to host this website, store enquiries and handle email through Google Workspace. We do not sell enquiry information. If we engage another provider or move into a client relationship, we will explain any additional processing relevant to you.
Storage and international processing
Enquiries are stored in our hosting account and relevant replies in our business mailbox. Providers may process data outside the UK. Before enabling production services, we require appropriate data-processing terms and an applicable transfer mechanism, such as UK adequacy regulations or approved contractual safeguards. Contact us for details of the providers and safeguards used for your enquiry.
How long we keep it
Website enquiry records are deleted automatically after 180 days. We review associated non-client correspondence at that point and delete it when it is no longer needed. If you become a client, necessary contract, accounting and project records are kept separately for the applicable contractual and legal periods, explained when we agree the work. Security rate-limit identifiers are cleared after one hour. Backup copies expire under our configured backup schedule.
Your rights
You can request access, correction, deletion or restriction of your data. Data portability may apply where processing is automated and based on a contract or consent. These rights depend on the circumstances.
You can object to processing based on legitimate interests. Email Luke using the address above. We do not add enquiry senders to a marketing list.
You can complain to the Information Commissioner's Office (ICO). You do not have to contact us first.
Cookies and automated decisions
This website uses a necessary, short-lived security cookie to protect the enquiry form. It does not use advertising cookies or analytics trackers. Fonts and photographs are served with the site. The portfolio demos do not submit personal information. We do not make decisions about you with legal or similarly significant effects using solely automated processing.