Privacy policy

This policy explains what personal information SunnDeck collects through this website, why we collect it and what your rights are. We keep it short because we collect very little.

Who we are

SunnDeck (“we”, “us”) designs, builds and looks after websites for small businesses. We are the data controller for the information described here. SunnDeck is owned by Robin Strutt and based in London, United Kingdom. You can contact us about privacy at hello@sunndeck.com.

What we collect

• When you contact us: your name, email address, phone number (if you give it) and your message.
• When you recommend someone to us: if you use our client referral page, your name and email address, and the name, business and email address or phone number of the person you recommend, plus any note you add. You must confirm that they’re happy for us to contact them before you send it.
• When you visit the site: our web server keeps standard technical logs, such as your IP address, browser type, the pages you request and the time. To stop spam, we also record how many messages each IP address has sent in the last hour.

We don’t use cookies or advertising trackers on this website, and we don’t build profiles of visitors. We do use Umami, a privacy-focused, cookieless analytics tool that we host ourselves on our own server, to count visits and see which pages and links are used (for example, how many people open the contact form or the booking calendar). It doesn’t set cookies, doesn’t store your IP address or anything that identifies you personally, doesn’t track you across other websites, and no analytics data is shared with third parties.

Why we use it

• To reply to your enquiry and, if you ask us to, give you a proposal or quote. The lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in answering messages sent to us.
• To contact a business someone has recommended to us, and to pay the person who recommended them any referral reward. The lawful basis is our legitimate interest in following up a recommendation that the person being recommended has agreed to. When we contact them, we’ll say who recommended them and how to ask us to delete their details.
• To keep the website secure and working, and to block spam and abuse. The lawful basis is our legitimate interest in running a safe website.

We will never sell your information, and we won’t add you to a mailing list unless you ask us to.

Who we share it with

We use a small number of trusted providers to run the site and deliver messages:

• Hetzner Online hosts the website in the EU.
• Resend delivers contact-form and referral messages to our inbox.
• Google (Gmail) stores the email we receive.

Some of these providers may process data outside the UK, including in the United States. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK–US data bridge. We only share information with others if the law requires us to.

How long we keep it

• Enquiries are kept for up to 2 years after our last contact with you, unless you become a client. Client records are kept for as long as we need them to provide our services, and then for up to 6 years for legal and accounting reasons.
• Referrals are kept on the same basis as enquiries. If someone you recommended doesn’t want to hear from us, we delete their details.
• Server logs are kept for up to 30 days. The spam counter is cleared after an hour.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask to see the information we hold about you, and ask us to correct it, delete it, restrict how we use it or send it to you in a portable format. You can also object to us using it on the basis of legitimate interests. Email us to make a request; we’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Links to other sites

This website links to sites we’ve built for our clients and to other websites. We aren’t responsible for how those sites handle your information, so please read their own privacy policies.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.