Your data, your rights

How we handle your data

Last updated: March 2026

Data controller: GitFoundry, United Kingdom

Contact: [email protected]

What we collect

When you use our brief form or contact us, we may collect the following personal data:

• Your name and email address
• Business or brand name
• Phone number (if provided voluntarily)
• Your website vision, style preferences, and project requirements
• Domain name (if you have one)

We do not collect payment information through this website. Payments are handled separately through secure, third-party payment processors.

How we use your data

We use your personal data for the following purposes:

• To respond to your enquiry and provide a project quote
• To deliver web design and development services you have requested
• To communicate with you about your project
• To comply with legal obligations

Lawful basis for processing

Under UK GDPR, we process your data on the following bases:

• Legitimate interest: responding to enquiries and delivering services you have requested
• Contract: processing data necessary to fulfil a service agreement
• Consent: where you voluntarily submit information through our brief form

Who we share data with

We do not sell, trade, or rent your personal data. We may share your information only with:

• Email service providers (for communication purposes only)
• GitHub (for website deployment - no personal data is stored on GitHub)
• Domain registrars (only if you request domain registration as an add-on)

How long we keep your data

We retain your project data for the duration of our working relationship and for up to 24 months after project completion for support purposes. Enquiry data from the brief form is retained for 12 months. You may request deletion at any time.

International transfers

Your data is primarily processed within the United Kingdom. Where data is processed by services based outside the UK (such as GitHub, which operates from the United States), we ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses.

Cookies and tracking

What cookies does this site use?

This website does not set any cookies by default. GitHub Pages may use strictly necessary technical cookies to deliver the site, but these do not track you or collect personal data.

Third-party services

We load fonts from Google Fonts, which may log your IP address as part of their standard service delivery. Google's privacy policy governs this data. No other third-party scripts are loaded on this site.

Cookies on sites we build for you

If you request Google Analytics or other third-party integrations on your own website, we will implement appropriate cookie consent mechanisms in compliance with UK PECR and GDPR requirements, including equal-prominence accept and reject options.

Working together

Services

GitFoundry provides custom web design, development, and deployment services. All work is agreed upon in writing before commencement. Project scope, deliverables, timeline, and pricing are confirmed via email or a formal proposal.

Payment

Payment terms are agreed per project. Typically, 50% is due before work begins and 50% upon completion. All prices are quoted in GBP and are exclusive of VAT unless stated otherwise.

Intellectual property

Upon full payment, you own all rights to the website design, code, and content created for your project. You are free to modify, distribute, or transfer your website without restriction. We retain the right to display the work in our portfolio unless you request otherwise in writing.

Revisions

Each package includes a specified number of revision rounds. Additional revisions beyond the included allowance are available at £25 per round. A revision round consists of a single set of consolidated feedback.

Hosting and domain

Websites are deployed on GitHub Pages, which is a free hosting service provided by GitHub (Microsoft). GitFoundry is not responsible for GitHub's uptime, terms of service, or policy changes. Domain registration, if requested, is handled through a third-party registrar and subject to their terms.

Limitation of liability

GitFoundry's total liability for any claim arising from our services is limited to the total fees paid for the relevant project. We are not liable for indirect, consequential, or incidental damages. This limitation does not affect your statutory rights.

Governing law

These terms are governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the English courts.

Your rights under UK data protection law

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, you have the following rights:

• Right of access: you can request a copy of the personal data we hold about you
• Right to rectification: you can ask us to correct inaccurate or incomplete data
• Right to erasure: you can ask us to delete your personal data (the "right to be forgotten")
• Right to restrict processing: you can ask us to limit how we use your data
• Right to data portability: you can request your data in a structured, commonly used format
• Right to object: you can object to processing based on legitimate interests
• Rights related to automated decision-making: we do not use automated decision-making or profiling

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month, in accordance with UK GDPR requirements.

How we protect your information

We take the security of your data seriously and implement the following measures:

• Encryption in transit: this website is served over HTTPS (SSL/TLS) via GitHub Pages, ensuring all data transmitted between your browser and our site is encrypted
• No server-side storage: as a static site, we do not operate databases, servers, or backend systems that store personal data. Brief form submissions are delivered directly to our email
• Minimal data collection: we only collect data that is necessary for the purpose stated. We do not collect sensitive personal data (health, biometric, political, religious, or genetic data)
• Access control: personal data is accessible only to GitFoundry and is not shared with unauthorised third parties
• Retention limits: data is retained only for as long as necessary and is securely deleted when no longer required

If something isn't right

If you believe we have not handled your personal data correctly, or if you wish to make a complaint about how your data has been processed, please follow these steps:

• Step 1: Contact us directly at [email protected] with a description of your concern. We will acknowledge your complaint within 5 working days and aim to resolve it within 30 calendar days.
• Step 2: If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent body for data protection.

We take all complaints seriously and view them as an opportunity to improve our practices. This complaints procedure is published in compliance with the requirements of the Data (Use and Access) Act 2025, which mandates a formal, accessible complaints process for all data controllers by June 2026.