GDPR & Data Protection

Our commitment

Nigel Peirce Digital takes data protection seriously. We aim to collect only what we need, keep it secure, and be clear about how we use personal information when providing website development, software development, business systems, automation, consulting and digital services..

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your data

Nigel Peirce Digital is the data controller for personal information collected through this website and in the normal course of business.

Lawful basis for processing enquiries

When you contact us through the website, by email or by phone, we process your personal information because it is necessary to respond to your enquiry and, where appropriate, to take steps before entering into a contract.

Depending on the situation, we may rely on one or more of the following lawful bases:

• Legitimate interests — to respond to enquiries, operate the business, maintain records and communicate with prospective and existing clients in a proportionate way
• Contractual necessity — where processing is needed to prepare, perform or manage a service agreement with you
• Legal obligation — where we must keep certain records for tax, accounting or regulatory reasons
• Consent — where you have clearly agreed to something specific, such as optional marketing communication if we offer it in future

Legitimate interest

We may rely on legitimate interests when you contact us about website development, software development, business systems, automation or consulting services. Our legitimate interests include running an efficient small business, responding to enquiries, and maintaining appropriate business records.

We balance those interests against your rights and only use information in ways you would reasonably expect when contacting a service provider.

Contractual necessity

If you become a client, we may need to process personal information and project materials to deliver the agreed work — for example contact details, login information you provide, content for your website, or technical specifications for software and automation projects.

Data minimisation

We aim to collect only the information needed for the purpose in question. Our contact form asks for practical details that help us understand your enquiry, but optional fields remain optional where possible.

If we do not need certain information to deliver a service, we will not ask for it unnecessarily.

Security measures

We use reasonable technical and organisational measures to protect personal information, including:

• Secure hosting through Vercel
• Protected email and business systems
• Access limited to those who need it for legitimate business purposes
• Sensible handling of passwords and project credentials shared by clients

No online system can be guaranteed completely secure, but we take appropriate steps to reduce risk.

Subject access requests

You have the right to ask whether we hold personal information about you and to request a copy of that information. This is sometimes called a subject access request.

Please contact us using the details below. We will respond within one month in most cases, as required by UK GDPR.

Right to rectification

If information we hold about you is inaccurate or incomplete, you can ask us to correct it. We encourage clients to let us know promptly if contact details or project information changes.

Right to erasure

In certain circumstances, you can ask us to delete personal information we hold about you — for example where it is no longer needed for the purpose it was collected, or where you withdraw consent where consent was the lawful basis.

We may need to retain some information where we have a legal or legitimate reason to do so, such as completed project records or accounting information.

Data portability

Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive certain information in a structured, commonly used, machine-readable format, or to ask us to transfer it to another controller where technically feasible.

This right is most relevant to structured digital data you have provided directly.

Third-party processors

We use service providers that may process personal data on our behalf, including:

• Vercel — hosting
• Resend — email delivery for contact form submissions

We choose providers that support appropriate security standards and use them in line with data protection requirements.

Complaints to the ICO

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint

More information

For broader details about what we collect and how long we keep it, please see our Privacy Policy.