Privacy Policy
This Privacy Policy explains how Daveden Digital Ltd ("we", "us", "I") handles personal data when you visit daveden.co.uk or use any of the features on this site. We aim to collect as little as possible, and only for the purposes set out below.
Who we are
Daveden Digital Ltd is a company incorporated in England and Wales (company number 16401801), with its registered office at 44 Watford Way, London NW4 3AL. The company is run by David Denedo. For data-protection matters you can contact us at info@daveden.co.uk.
[TODO: confirm whether you are registered with the ICO. If so, add your registration number; if you are exempt because you process no in-scope data, state that explicitly.]
What we collect
We collect personal data only in these specific situations:
- Contact form. When you submit the contact form we collect your name, email address, subject line, and message. The form is protected by Cloudflare Turnstile, which performs a bot check; Turnstile receives basic request metadata (IP address and a short-lived token) but no form fields.
- Comments. When you leave a comment on an article we collect the name and email address you enter, plus the comment text. Comments are stored in our WordPress backend and reviewed before publication. Your email is not shown publicly.
- Newsletter. When you subscribe to the newsletter we collect your email address only. Subscriptions are handled by MailerLite; their privacy policy applies to the data they hold on our behalf.
- Server logs. Both of our hosts — Vercel (which serves the static daveden.co.uk site) and Hostinger (which hosts the WordPress backend that powers comments, contact-form delivery, and newsletter signups) — record standard request logs (IP address, user agent, requested URL, timestamp) for security and abuse prevention. These logs are retained by each provider under their own policy. Static assets such as course video captions and transcript files are bundled into the site at build time, so your browser fetches them from Vercel along with the rest of the page — it never reaches Hostinger for them.
We do not use analytics, advertising trackers, or fingerprinting on this site.
Why we use it (lawful basis)
- Contact form messages are processed under our legitimate interest in responding to enquiries.
- Comments are processed under your consent (you choose to submit them) and our legitimate interest in moderating and hosting them.
- Newsletter subscriptions are processed under your consent, given by submitting the subscription form. You can withdraw consent at any time by unsubscribing from any email we send.
- Server logs are processed under our legitimate interest in keeping the site secure and operational.
How long we keep it
- Contact-form messages: retained for [TODO: e.g. 24 months] for follow-up, then deleted.
- Comments: retained indefinitely while the related article is published. You can ask us to delete or anonymise a comment at any time.
- Newsletter: retained until you unsubscribe.
- Server logs: held by Vercel and Hostinger under each provider's own retention policy. Contact us if you need specifics.
Who we share it with
We do not sell or rent personal data. We share data only with the service providers needed to operate the site:
- Vercel — hosts the static site (daveden.co.uk) and records request logs.
- Hostinger — hosts the WordPress backend (main.daveden.co.uk) where comments, contact-form messages, and the tutorial / course content are stored.
- Cloudflare — Turnstile bot check on the contact form.
- MailerLite — newsletter delivery.
- Titan Mail — delivery of contact-form messages to our inbox.
Each provider acts as a processor on our instructions and is bound by their own data-protection agreement.
International transfers
Some of the providers listed above operate outside the UK and EEA. Where this is the case, transfers are covered by the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses with the UK addendum, as required.
Cookies and similar technologies
This site uses no analytics or advertising cookies. It uses a single
localStorage entry to remember your light/dark theme preference,
which never leaves your browser. Embedded YouTube videos and the Turnstile widget
may set their own cookies when you interact with them — see our
Cookie Policy for details.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data ("right to erasure").
- Object to or restrict processing in certain circumstances.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with the Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email info@daveden.co.uk. We aim to respond within 30 days.
Changes to this policy
We may update this policy from time to time — for example when we add a new service or change a provider. The "Last updated" date at the top of this page always reflects the most recent change. Material changes will also be flagged on the homepage or in the newsletter.
Contact
For any privacy question, write to info@daveden.co.uk or use the contact form.