Legal
Privacy & Cookie Policy
Last updated: 28 September 2026
This policy explains what personal information I collect when you use this website or get in touch, why I collect it, how I look after it and the rights you have over it. It also covers cookies. I've tried to keep it short and in plain English.
Who I am
This website is run by Lee Lawton, trading as Lee Lawton Design, a freelance web designer and developer based in Stoke-on-Trent, Staffordshire. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), I am the controller of the personal information described in this policy.
If you have any questions about this policy or your information, email me at contact@leelawtondesign.co.uk.
What I collect
When you use the contact form
- Your name and email address
- Your phone number, if you choose to give it
- Whether you're a business or an agency, your budget range and anything you tell me about your project
When you use the live chat
Anything you type into the chat, plus your name or email address if you choose to share them. The chat also records basic technical details such as the page you're on and your approximate location based on your IP address, so I have context when I reply.
When you email me or become a client
Whatever you include in your messages, plus the details needed to run a project with you - such as your business name and address, invoicing details and records of the work we agree.
When you browse the site
Like any website, the server that hosts this site and the service that supplies its fonts receive technical information when your browser requests a page, such as your IP address, browser type and the page requested. I don't use this to identify you. This site does not use analytics, advertising or tracking tools.
How I use your information and why
- To reply to your enquiry or chat message and discuss your project. This is necessary to take steps at your request before entering into a contract, and is also in my legitimate interest in responding to people who contact me.
- To deliver work for clients, including communication, invoicing and support. This is necessary to perform our contract.
- To keep business and tax records, which I'm legally required to do.
- To keep this website running securely, which is in my legitimate interest.
I will never sell your information, and I won't add you to a mailing list or send you marketing.
Who I share it with
I only share your information with services that help me run this website and my business, and only as much as they need:
- Netlify - hosts this website and receives contact form submissions
- Tidio - provides the live chat
- Google - supplies the fonts used on this site
- my email provider and my accountant
Each is bound by their own data protection obligations.
Some of these providers, including Netlify and Google in the United States, may process information outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement.
I may also share information if the law requires it.
How long I keep it
- Enquiries that don't go ahead: up to 12 months after our last contact, in case you get back in touch about the same project.
- Client records: 6 years after the end of the financial year the work was completed in, as required for tax purposes.
After that, your information is securely deleted.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information I hold about you
- ask me to correct anything that's wrong or incomplete
- ask me to delete your information
- object to, or ask me to restrict, how I use your information
- ask for your information in a portable format
To use any of these rights, email contact@leelawtondesign.co.uk. I'll respond within one month. Some rights have limits - for example, I can't delete records I'm legally required to keep - and I'll explain if that applies.
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Keeping it secure
This website is served over an encrypted connection (HTTPS), and I keep client information in secure, password protected accounts with two-factor authentication where available.
Cookies
Cookies are small files that websites can store on your device. This website doesn't use analytics, advertising or tracking cookies.
Live chat
The live chat is provided by Tidio. It stores a small amount of information in your browser (cookies and local storage) so it can recognise you between pages and keep your conversation if you return. It loads a few seconds after the page. You can read how Tidio handles data in the Tidio privacy policy, and you can clear this information at any time through your browser settings.
Fonts
The site loads its font from Google Fonts. This means your browser connects to Google's servers, which receive your IP address so they can deliver the font files. Google Fonts does not set cookies. You can read how Google handles this in the Google Fonts privacy FAQ.
If I ever add analytics or advertising tools, I'll update this policy and ask for your consent before they're used.
Changes to this policy
I may update this policy from time to time. The date at the top shows when it was last changed.