Privacy Policy
Last updated: 14 October 2026
This privacy policy explains how Eightfold Digital collects, uses and protects your personal information when you use this website or work with us. We keep things simple: we only collect what we need, we never sell your data, and you’re always in control.
Who we are
Eightfold Digital is a web design and SEO business run by Matthew Jackson, a sole trader based in Bedford, United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the “data controller” for the personal information described in this policy.
Contact: hello@eightfolddigital.co.uk
What information we collect
When you contact us or request a quote, we collect your name, email address and phone number, your business name and current website, details about your project such as the services you need and your budget range, and anything else you choose to tell us in your message.
When you become a client, we collect your contact and billing details, project information, content and files you send us, and login details for services we need to access to do the work (for example, your domain registrar). We store these securely and only use them for your project.
When you visit the website, technical information such as your IP address, browser type and the pages you visit is collected by our hosting, security and (if you consent) analytics tools. See “Cookies” below.
How and why we use your information
We only use your information when the law allows us to. In practice, that means:
- We reply to your enquiry and send you a quote because you’ve asked us to, as a step before entering a contract.
- We deliver the work you’ve asked for and send invoices in order to perform our contract with you.
- We keep business and financial records to meet our legal obligations, such as HMRC rules.
- We keep the website secure and protect it from spam and attacks because we have a legitimate interest in running a safe website.
- We use analytics to understand how visitors use the website only with your consent, given through our cookie banner.
We will never sell your personal information or use it for marketing you haven’t asked for. If we ever want to send you marketing emails, we’ll ask first, and you can unsubscribe at any time.
Who we share your information with
We use a small number of trusted providers to run the business. They only process your information on our instructions and must keep it secure:
Fasthosts – website hosting (servers in the UK)
Cloudflare – website security and performance
Google Workspace – business email, file storage and calendar
Brevo – delivering emails sent from our website forms
Wordfence – website security (records IP addresses to block attacks)
Google Analytics – understanding how visitors use our website (only with your consent)
Starling Bank – business banking and receiving payments
We may also share information if required by law, for example with HMRC, or to protect our legal rights.
International transfers
Some of our providers (such as Google, Cloudflare and Brevo) may process data outside the UK, including in the European Economic Area and the United States. When this happens, the transfer is protected by an approved safeguard, such as a UK adequacy decision or the UK International Data Transfer Agreement or Addendum, so your information gets the same level of protection.
How long we keep your information
Enquiries that don’t go ahead are kept for up to 2 years, then deleted.
Client records, contracts and invoices are kept for 6 years after the end of the tax year they relate to, as required by HMRC.
Website security logs are usually kept for no longer than 90 days.
Form submission and email logs on the website are kept for up to 12 months.
Keeping your information secure
We take security seriously. It’s part of what we sell. Our website runs on a secured server with a firewall, two-factor authentication on all accounts, encrypted (HTTPS) connections and regular backups. Only Matthew has access to your information.
Your rights
Under UK data protection law, you have the right to:
Access the personal information we hold about you.
Correct anything that’s wrong or incomplete.
Delete your information, unless we have to keep it by law.
Restrict or object to how we use it.
Take your data with you in a commonly used format (data portability).
Withdraw your consent at any time, where we rely on consent (for example, analytics cookies).
To use any of these rights, email hello@eightfolddigital.co.uk. We’ll respond within one month, and there’s no charge.
Cookies
Our website uses cookies. Some are essential to make the site work, and others (such as analytics) are only used if you agree through our cookie banner. You can change your choices at any time. For full details, see our Cookie Policy.
Websites we host for clients
If we build or host a website for one of our clients, that client is responsible for the personal data collected on their website, and we process it on their behalf. If you have a question about your data on one of our clients’ websites, please contact that business directly.
Links to other websites
Our website may link to other sites. We’re not responsible for their privacy practices, so please check their privacy policies.
Children
Our services are for businesses, and we don’t knowingly collect information from anyone under 18.
Complaints
If you’re unhappy with how we’ve handled your information, please contact us first at hello@eightfolddigital.co.uk, and we’ll do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.