Privacy and cookies

Privacy and cookie notice.

The short version: nothing is tracked unless you say yes, the contact form goes to a person, and nothing is sold or shared.

Who this covers

This notice explains what happens to your information when you use jonesdigital.co.uk or get in touch with Jones Digital. The data controller is Jones Digital (Connor Jones), Croydon, Greater London, United Kingdom. Email info@jonesdigital.co.uk with any question about it.

What is collected, and why

The contact form. When you send a message, your name, email address, project type, budget range (if given), message, and the page you sent it from are emailed to the studio and written to a private log on the web server so that no enquiry is lost if email fails. This is used to reply to you and, if you become a client, to run the work. The legal basis is the steps you have asked to be taken before a contract (UK GDPR Article 6(1)(b)) and, for keeping a record of the conversation, legitimate interests.

Spam protection. The form records the time it took to fill in and keeps a short-lived count of submissions per IP address to stop automated abuse. These counters expire automatically and are not used for anything else.

Server logs. Like every web server, this one keeps standard access logs (IP address, page requested, browser type, time). They are used only for security and to keep the site running, and are rotated on a schedule.

Analytics, only if you accept. Google Analytics 4 is loaded only after you click Accept on the cookie banner. Before that, no analytics script runs and no analytics cookie is set. It reports which pages are visited and roughly how visitors arrive, and is used to understand what on the site is useful. You can decline, and you can change your mind later by clearing the site data for this domain in your browser.

Cookies and local storage

The site sets no cookies of its own. Your Accept or Decline choice on the banner is remembered in your browser’s local storage, so you are not asked again. If you accept analytics, Google sets its usual analytics cookies (named _ga and similar) which expire after up to two years. No advertising or tracking cookies are used, and nothing is loaded from social networks.

Where it goes

The site and its logs are hosted on a server operated by OVH in the European Union. Email is handled by Google Workspace. Google Analytics, if you accept it, is provided by Google and may process data in the United States under the UK International Data Transfer Addendum. No data is sold, and it is not shared with anyone else unless the law requires it.

How long it is kept

Enquiries are kept for as long as needed to respond to you and, if you become a client, for the life of the working relationship plus the period needed for accounting records. If you ask, an enquiry that did not lead to work is deleted.

Your rights

Under UK GDPR you can ask what information is held about you, ask for it to be corrected or deleted, object to its use, or ask for a copy. Email info@jonesdigital.co.uk and it will be dealt with within a month. If you are unhappy with how it is handled, you can complain to the Information Commissioner’s Office at ico.org.uk.

Client work and AI tools

For client projects, the data you share is used only for that project. Where AI tools are part of a build, they are chosen and configured so that your data is not used to train anyone’s models, and a data processing agreement is put in place with the provider. This is covered in writing before any build starts.

Changes

This notice is updated when the site changes what it collects. The date of the current version is shown below.

Version dated 14 September 2026.