Privacy notice

This notice explains how Up2Digital ("Up2Digital", "we") collects and uses personal information through this website and our client portal, in line with UK GDPR and the Data Protection Act 2018. We are the controller of that information.

What we collect

• When you get in touch, plan a project, book a call or order a health check: your name, email, and anything you choose to add (phone, business, website, your description, the pieces you picked, timing and budget).
• If you become a client and use the portal: your account details and preferences, messages, the files you share, your answers to our forms, approvals and change requests, call bookings, quotes (including the name you type to accept one, with the time and IP address), invoices and payments.
• Payments: if you pay by card, the payment is handled by Stripe. We never see or store your card details; we receive confirmation that an invoice has been paid.
• Technical information: IP addresses are used briefly to stop abuse (for example rate limits on forms and sign-in) and appear in our server logs.

Telling real enquiries from spam

We get a lot of automated messages and sales pitches. To sort genuine enquiries from them, when you send a form we note your approximate location (country and nearest town) and the kind of network you're on, worked out from your IP address using a location database kept on our own server, so nothing is sent to anyone else. We also note how long the form took and whether the phone number looks valid. We keep only a shortened form of your IP address (for example 81.2.69.0), and this information stays with your enquiry for 12 months. It is only used to put real people first: nothing is blocked automatically, and a person reads every message.

IP location data by DB-IP, licensed under CC BY 4.0.

We also count, anonymously, how many visits reach each step of the project builder (no cookies, no identifiers, nothing that could be linked to you), and we note which pages search engines and AI crawlers fetch.

Why we use it, and our lawful basis

• To reply to you, prepare quotes, arrange calls and deliver and support the work: steps at your request before a contract, and performing our contract with you.
• To keep business and accounting records: our legal obligations.
• To keep the website and portal secure and working well, and to filter out spam: our legitimate interests.

We don't sell your information, use it for advertising, or make automated decisions about you.

How long we keep it

If an enquiry doesn't become paid work, we delete it after 12 months. Client records, quotes and invoices are kept for six years after our last invoice, because UK tax law requires it. Backups are kept for 30 days and then deleted.

Who we share it with

Only the service providers that help us run things, and only what they need:

• Oracle Cloud hosts this website, the portal and their data.
• Stripe processes card payments, when you choose to pay by card.
• The email service we use to send you messages, and the video-call service named in your call invite.

Where your data is stored

Our servers are run by Oracle Cloud in the United States. Transfers from the UK are covered by the UK Extension to the EU-US Data Privacy Framework, in which Oracle participates, and by Oracle's UK data transfer terms. Everything travels encrypted, and files you share are stored privately and only available to the people on your project.

Your rights

Under UK GDPR you can ask us to:

• tell you what we hold and give you a copy (clients can download everything in one click from My details in the portal);
• correct anything that's wrong (or edit it yourself in the portal);
• delete your information, where we're not required to keep it;
• stop or restrict using it, or move it elsewhere.

Just ask through our contact form or a portal message. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies and your browser's storage

We use no analytics, advertising or tracking cookies, and our fonts are self-hosted. We only use:

• a security cookie that protects our forms against forged submissions;
• a sign-in cookie when you use the client portal;
• if you use the "I run a…" picker, a preference cookie for a year that holds nothing but your type of business.

The project builder, the time calculator and "My project" keep your answers in your own browser so you can come back to them. Nothing reaches us until you press send, and "Start again" clears it.

Contact us

Questions about this notice or your information? Use our contact form.

Last updated: October 2026 · See also our terms of business.