Privacy
Privacy policy
Updated 7 November 2026
This policy describes what this website does with personal information. It is written for the site as it is built: a static website with a contact form and no customer accounts. It is not a general policy for software Digital Smiddy later builds for clients.
Who we are
Digital Smiddy is a trading name of Design Forge Ltd, company number 09077476. Design Forge Ltd is the controller for enquiries sent through this website.
The company’s registered office is 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom. That is the address held at Companies House. It is not a public studio, and visiting it will not reach us.
The practice is based in Moray, Scotland, and works with clients there and across the UK. There is no separate shop or office address published on this site.
What we collect
If you use the contact form, we receive the name, email address, message and chosen subject you submit, plus a company name if you choose to give one. We use those details to read your enquiry and reply.
If you email us directly, we receive whatever you include in that email, and the technical headers that come with it.
We do not ask you to create an account, and this website does not have a database of its own in which messages are stored.
How the form is delivered
The form is sent to Web3Forms (web3forms.com), which forwards the submission by email. Web3Forms is a processor for that delivery. Their own privacy information is published at https://web3forms.com/privacy .
The access key that identifies our form is included in the page, which is how this kind of static form works. It does not grant access to your mailbox.
A hidden field is included to catch automated spam. Please leave it untouched. Web3Forms may also apply its own spam filtering and may record technical information such as an IP address as part of providing that service.
Hosting and server logs
The site is a set of static files served by our web server. Like most servers, it may record the IP address, browser, date and the page requested in order to operate and protect the site.
Those logs are used for security and troubleshooting. They are not used for advertising, and they are not sold.
Cookies and analytics
This website does not use analytics, advertising cookies, or a tag manager. Pages are server-rendered static files and do not set a cookie for tracking.
Fonts are served from this website, so viewing a page does not call Google Fonts or another font host.
If that changes, this policy will be updated before any non-essential cookie is introduced.
Why we use the information
We use enquiry details to respond, and to take the steps you ask for before a contract. The lawful basis is legitimate interests in answering people who contact us, and steps prior to a contract where the enquiry is about work we might do for you.
We do not use enquiry details for a mailing list, and we do not pass them to advertisers.
How long we keep it
Enquiry emails are kept for as long as we need them to correspond with you, to carry out work you have asked us to do, and to meet ordinary legal, tax and accounting duties. They are then deleted or kept only where a specific duty still applies.
Server logs are kept only for a limited operational period and then removed. The precise number of days depends on the server configuration and should be treated as a detail the owner confirms for the live host.
Who else sees it
Enquiry content is handled by Web3Forms in order to deliver the email, and then by the email provider of the inbox we nominate. We do not publish a list of subprocessors beyond that, because the inbox is chosen when the form is connected.
We may disclose information if the law requires it. We do not sell personal information.
Your rights
You can ask for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, object to certain uses, and ask for restriction of processing. Where we rely on a legitimate interest, you can object and we will consider that request.
To use these rights, contact us through the form on this site or by the email address published on the contact page, once one is published. We may need to confirm you are the person the information is about.
You can also complain to the Information Commissioner’s Office, the UK regulator: https://ico.org.uk/make-a-complaint/ . We would like the chance to put things right first.
Changes
If the site starts using analytics, a different form provider, or any new kind of personal data, this page will be updated and the date at the top will change.