Privacy Policy

1. Who we are

This website (dannywilson.uk) is operated by Danny Wilson, a freelance content creator based in the United Kingdom ("we", "us", "our"). For any privacy-related questions or requests, contact Danny@dannywilson.uk.

For the purposes of the UK GDPR and the Data Protection Act 2018, Danny Wilson is the data controller for personal data collected through this site.

2. What we collect

We only collect personal data that you actively provide, together with limited technical information needed to run the site:

• Contact enquiries — name, email address, company (optional), phone (optional), website (optional), project type, budget, timeline, platform, and the message you send us.
• Technical metadata — IP address, browser user agent, referring URL and any UTM parameters, captured at the time of your enquiry to help prevent abuse and understand where enquiries come from.

We do not knowingly collect data from children under 16.

3. Why we use it (legal bases)

• To respond to your enquiry — legal basis: legitimate interests and, where relevant, steps taken at your request prior to entering into a contract.
• To keep a record of enquiries for reference and accounting — legal basis: legitimate interests and legal obligation.
• To protect the site from abuse (spam, malicious traffic) — legal basis: legitimate interests.

4. Who handles the data

We use trusted service providers to run the site and deliver enquiries:

• Lovable (Lovable AB, Sweden) — website hosting, database (Lovable Cloud) and transactional email delivery.
• Email inbox provider — your enquiry is delivered to Danny@dannywilson.uk and stored in that mailbox.

We do not sell your personal data and we do not share it with third parties for marketing.

5. International transfers

Some of our providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

6. How long we keep it

• Contact enquiries: up to 24 months from the last interaction, then deleted or anonymised.
• Enquiries that lead to paid work: retained for 7 years after the end of the engagement to meet UK tax and accounting obligations.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to erase your data ("right to be forgotten").
• Restrict or object to how we process your data.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email Danny@dannywilson.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

8. Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS) and access controls on our hosting provider. No system is 100% secure — please only send information you are comfortable sharing.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page shows when it was last revised.