Privacy
I collect only what you send me. I use it to reply to you and to do the work you pay for. I don't sell it, this site sets no cookies, and you can ask me to delete what I hold.
Who I am
Dexter Brown Web is the trading name of Francis Dexter Brown, a sole trader. I decide how your personal data is used, which makes me the data controller. Where this page says "I", it means me.
Old Hall, Kerdiston Road, Reepham, Norwich, NR10 4RY
francis@dexterbrownweb.co.uk
What I collect
If you use the contact form: your name, email address, business name and message.
If you email me: your email address, anything you put in the email, and my replies.
If you become a client: your billing details, the text, photos and logos you send for your site, and a record of what you have paid.
When anyone visits this site, Cloudflare, who host it, process your IP address and basic browser details to deliver the pages and block attacks. I see only total visitor numbers, not who you are.
Why I use it
UK data protection law asks me to name a lawful basis for each use.
| What I do with it | Lawful basis |
|---|---|
| Reply to your enquiry | Legitimate interests: you asked me a question and I want to answer it |
| Build and look after your website | Contract: I need it to do the work you have paid for |
| Send invoices and keep the records | Contract, and legal obligation for tax records |
| Run and protect this website | Legitimate interests: keeping the site working and secure |
I don't use your details for marketing lists and I don't sell them.
Who else handles it
Three companies process data for me. Each only acts on my instructions.
- Formspree receives contact form messages and passes them to my inbox.
- Google Workspace runs my email and stores client files.
- Cloudflare hosts this site, protects it from attacks and counts visits without cookies.
Data outside the UK
Formspree, Google and Cloudflare may process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework or by the UK International Data Transfer Addendum, which require them to protect it to UK standards.
How long I keep it
- Enquiries that don't lead to work: 12 months, then deleted.
- Invoices and the records behind them: 6 years, to meet tax rules.
Your rights
Under UK GDPR you can ask me to:
- give you a copy of the data I hold about you
- correct anything that is wrong
- delete your data
- limit how I use it
- stop using it where I rely on legitimate interests
- send it to you or another business in a common file format
Email me to ask. It is free, and I will reply within one month. I may ask you to confirm who you are first. Some data, like invoices, I have to keep by law even if you ask me to delete it. If that applies, I'll tell you.
Complaints
If you're unhappy with how I've handled your data, please tell me first and I'll try to put it right.
You can also complain to the Information Commissioner's Office:
Make a complaint on the ICO website
Phone 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF