Privacy Policy
How Pergonia Digital collects, uses, and protects your personal data.
Last updated: May 15, 2026
Last Updated: May 15, 2026
This Privacy Policy explains how Pergonia Digital ("we", "us", "our"), operated by Thomas Cordes, collects, uses, and protects your personal data when you visit our website at pergoniadigital.co.uk or interact with our services. We are committed to protecting your privacy and handling your data in a transparent manner, in compliance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.
Pergonia Digital is registered with the Information Commissioner's Office (ICO). ICO Registration Number available upon request.
1. Who We Are
Pergonia Digital is a web design and digital services provider based in the United Kingdom, serving sole traders, growing SMEs, and established businesses. Our services include custom website development, digital strategy, and ongoing support.
2. Data We Collect About You
We collect and process various types of personal data, depending on how you interact with our website and services. This data falls into the following categories:
a. Information You Provide Directly
When you engage with us, for example, by filling out a contact form or sending us an email, you may provide us with:
- Contact Information: Your name, email address, and phone number.
- Business Information: Your business name and details relevant to your project requirements.
- Project Details: Information about your project needs, goals, and communications related to our services.
b. Technical and Usage Data
When you visit our website, we automatically collect certain technical and usage data, which may include:
- IP Address: Your Internet Protocol address.
- Browser and Device Information: Your browser type and version, device type, operating system, and screen resolution.
- Website Interaction Data: Pages you visit, time spent on pages, links clicked, and your navigation path on our website.
c. Marketing and Tracking Data
With your consent, we collect data related to your interactions with our marketing efforts and website tracking:
- Cookie Identifiers: Unique identifiers stored in cookies on your device.
- Analytics Data: Data collected via Google Analytics 4, including anonymised or pseudonymised information about your website usage and behaviour.
3. How We Use Your Data
We use your personal data for the following purposes:
- To Respond to Enquiries: To assess project suitability and respond to your requests for information or proposals.
- To Deliver Services: To provide and manage the web design and digital services you have contracted us for.
- To Communicate with You: To send you updates, project-related information, and support communications.
- For Financial Management: To process payments, manage invoicing, and maintain accurate financial and tax records.
- To Improve Our Website: To analyse website performance, user experience, and to enhance our online presence.
- For Marketing Communications: To send you relevant service updates or promotional materials, where we have a lawful basis, such as consent or legitimate interest.
4. Our Legal Basis for Processing Your Data
We process your personal data under the following legal bases as defined by the UK GDPR:
- Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract, such as responding to project proposals.
- Legitimate Interests: Processing is necessary for our legitimate interests, such as to operate, protect, and improve our business, detect fraud, or ensure network security, provided your interests and fundamental rights do not override those interests.
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject, such as maintaining financial records for tax purposes.
- Consent: We rely on your explicit consent for certain activities, such as the use of non-essential cookies for analytics and marketing tracking, and for sending direct marketing communications. You have the right to withdraw your consent at any time.
5. Data Sharing and Third-Party Services
We do not sell your personal data to any third party.
We may share your data with trusted third-party service providers who assist us in operating our business and delivering our services. We ensure that all third-party providers are contractually obligated to comply with applicable data protection laws and maintain appropriate security standards, including Data Processing Agreements (DPAs) where required.
Our third-party service providers include:
- Payment Processors: For secure payment processing. We do not store full payment card details.
- Accounting Software: Xero, for invoicing, financial records, and tax compliance.
- CRM and Communication Platforms: HubSpot, for client and prospective client management, including contact records and communications from enquiry forms; Google Workspace, for email, document storage, and internal communications.
- Hosting and Infrastructure Providers: Cloudflare, for domain management, DNS, and performance delivery, including Cloudflare Pages for website hosting; GitHub, for code storage, version control, and automated deployment.
- Analytics Providers: Google Analytics 4, for website traffic analysis.
- AI-Assisted Tools: Anthropic Claude, used to support content creation and internal workflows. We take measures to ensure sensitive personal data is not submitted to these systems, and data is anonymised or pseudonymised where possible.
6. International Data Transfers
Some of our service providers may process personal data outside the United Kingdom or the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, such as:
- UK Adequacy Regulations: Relying on countries recognised by the UK government as providing adequate protection for personal data.
- Standard Contractual Clauses (SCCs): Implementing approved contractual clauses that provide equivalent data protection safeguards.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. The retention periods vary depending on the type of data and purpose of processing:
- Client and Project Data: Up to 6 years after the completion of a project, for legal and tax compliance purposes.
- Enquiry and Prospect Data: Typically 12-24 months from the last contact, unless it leads to a client relationship.
- Analytics and Cookie Data: In accordance with the retention settings of the respective platforms, such as Google Analytics.
- Marketing Data: Until you withdraw your consent or object to processing.
8. Your Data Protection Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- The Right to Access: You have the right to request copies of your personal data.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
- The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at support@pergoniadigital.co.uk. We will respond to your request within one month.
9. Automated Decision-Making and Profiling
Pergonia Digital does not use automated decision-making or profiling that produces legal or similarly significant effects concerning individuals.
11. Third-Party Links
Our website may contain links to external websites that are not operated by us. Please be aware that we have no control over the content and practices of these sites and cannot accept responsibility or liability for their respective privacy policies. We encourage you to review the privacy policy of every site you visit.
12. Security Measures
We implement robust technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure systems and infrastructure.
- Restricted access controls to personal data.
- Use of reputable third-party providers with strong security standards.
- Regular security assessments and updates.
While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but take our obligations seriously and will act promptly in the event of any known data breach or security incident.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updates will be published on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our website or services following any update constitutes acceptance of the revised policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Point of Contact:
- Thomas Cordes
- Trading as Pergonia Digital
- Email: support@pergoniadigital.co.uk
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully. The ICO's website is ico.org.uk.