1. Who I am
This website is run by Joshua Dearden, trading as Joshua Dearden App Development ("I", "me"), 2 Cwmcarn Close, St Mellons, Cardiff, CF3 0HA, United Kingdom. I am the controller of the personal data collected through this website and in the course of providing my services.
For any privacy question or request, email joshua_dearden@outlook.com or call +44 7401 526505.
2. What personal data I collect
- Enquiries: your name, email address, phone number, company name and the project details you send through the contact form, by email or by phone.
- Orders: your name, email address, phone number, billing address, the project summary you enter at checkout, and the status of your payment.
- Payment details: card payments are processed by Stripe. I never see or store your full card number.
- Project materials: files, content, designs, account access and other information you share so I can deliver the service.
- Technical data: my hosting provider processes your IP address, browser type and the pages you request in server logs, to deliver the site and keep it secure.
3. How I use your data and why
- To reply to your enquiry and prepare a quote, because you've asked me to take steps before entering into a contract, and because it's in my legitimate interests to respond to business enquiries.
- To deliver the services you order, keep you updated and handle payments, because this is necessary to perform our contract.
- To keep accounting and tax records, because the law requires it.
- To protect the website and prevent fraud, because it's in my legitimate interests to keep the site and my business secure.
I don't sell your personal data and I don't send marketing emails unless you've agreed to receive them.
4. Who I share data with
- Stripe, to process payments and prevent fraud. Stripe also acts as an independent controller for some purposes, as described in its own privacy policy.
- Netlify, which hosts this website and stores contact form submissions.
- Microsoft, which provides my email service.
- Professional advisers such as an accountant, where needed to run my business.
- Third-party services used in your project, such as app stores or hosting providers, only as far as needed to deliver the work you've asked for.
- Public authorities, where I'm legally required to share information.
5. International transfers
Some of these providers process data outside the UK, including in the United States. Where that happens, transfers are protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum to standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework.
6. How long I keep your data
- Enquiries that don't lead to work are kept for up to 12 months.
- Client and order records are kept for as long as our contract lasts and then for six years, to meet tax and legal requirements.
- Project materials and account access are returned or deleted at the end of a project, unless you ask me to keep them for future support.
7. Cookies
This website doesn't use advertising or analytics cookies and doesn't store tracking data in your browser. When you pay, you're taken to Stripe's secure checkout page, which uses its own cookies to process the payment and prevent fraud. Those cookies are covered by Stripe's privacy and cookie policies.
8. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal data I hold about you;
- ask me to correct data that's inaccurate or incomplete;
- ask me to delete your data, where there's no good reason for me to keep it;
- ask me to restrict or stop processing your data in certain situations;
- object to processing based on legitimate interests;
- receive data you've given me in a portable format; and
- withdraw consent at any time, where processing is based on consent.
To make a request, email joshua_dearden@outlook.com. I'll respond within one month. If you're unhappy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I'd appreciate the chance to resolve your concern first.
9. Security
I use reputable providers, secure connections (HTTPS) and access controls to protect your information. Account credentials you share for a project are used only for that project and removed when they're no longer needed.
10. Changes to this policy
I may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.