Privacy policy

Last updated: 11 October 2026

Who I am

GeekFace is a web design business run by John in Exeter, Devon. For anything to do with your personal data, I’m the “data controller”, which just means I’m the person responsible for it.

You can reach me through the contact form on this site.

What I collect, and why

The contact form. If you get in touch, I collect your name, email address and your message. I use it only to reply to your enquiry and, if we end up working together, to provide the service we agree. The lawful basis is legitimate interests (answering a genuine enquiry) and, if you become a client, performance of a contract.

Server logs. Like almost every website, the hosting provider keeps standard logs: your IP address, browser type and the pages you requested. These are used for security and keeping the site running. The lawful basis is legitimate interests.

Your cookie choice. The consent banner stores your accept or decline choice in your browser’s local storage. That isn’t a cookie, and it’s only there so I don’t have to ask you again on every visit.

Cookies

This site currently sets no tracking cookies and runs no analytics or advertising scripts.

The consent banner lets you choose before anything optional ever loads. If analytics are added in future, they will only run for visitors who click accept. Declining means nothing optional is stored on your device.

You can change your choice at any time using the “Cookie settings” link in the footer.

Who handles your data

I don’t sell your data and I don’t share it for anyone else’s marketing. A small number of services process it on my behalf, only for the purposes described above:

• Cloudflare, which hosts and serves this website and keeps security logs.
• Resend, which delivers contact form messages to my inbox.
• Google Workspace, which provides my email, where your messages are stored.

Some of these providers may process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or standard contractual clauses approved for international transfers.

How long I keep it

• Contact form enquiries: while I’m dealing with your enquiry, and up to 12 months afterwards for reference.
• If you become a client: for the length of our working relationship, then up to 6 years to meet tax and legal record-keeping obligations.

Your rights

Under UK GDPR you can ask me to:

• give you a copy of the personal data I hold about you,
• correct anything that’s wrong,
• delete it,
• restrict or object to how it’s used,
• provide it in a portable format, and
• withdraw consent at any time (for example, changing your cookie choice).

Just send me a message through the contact form. I’ll respond within a month.

If you’re unhappy with how your data has been handled, you can complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. I’d appreciate the chance to put things right first, but the ICO is always an option.

A few more things

This site isn’t aimed at children, and I don’t knowingly collect data from them. There’s no automated decision-making or profiling: nobody’s data gets fed through an algorithm that decides anything about them.

Changes to this notice

If the way this site handles data changes (for example, if analytics are added), I’ll update this page and the date at the top before the change goes live.