What happens to your information

01Who I am

This site belongs to Ross Langston, a sole trader trading as RPL Design in the United Kingdom. For data protection purposes I am the data controller — the person responsible for deciding how your information is handled.

You can reach me at ross@rpl-design.co.uk about anything on this page.

02What I collect

If you use the contact form, I receive what you type into it: your name, email address, a description of what you need, and optionally the type of work, timescale, budget range and how you found me.

If you email me directly, I receive your email address and whatever you write.

Automatically, my hosting provider records basic technical information about requests to the site — IP address, browser type, and which pages were requested — as part of delivering it securely. I don't use this to identify anyone.

There are no advertising trackers, no third-party analytics scripts, and no profiling of visitors.

03Why I collect it, and on what basis

To reply to your enquiry

Where you've contacted me about possible work, the lawful basis is that processing is necessary to take steps at your request before entering into a contract.

To keep records of work discussed and carried out

My legitimate interests in running a business, keeping accurate records and being able to refer back to previous conversations.

To keep the site secure and working

My legitimate interests in protecting the site from abuse and diagnosing faults.

04Who else sees it

I don't sell or share your information. A small number of service providers process it on my behalf, purely to deliver the things this site needs to work:

• Cloudflare — hosts the site and routes email to my inbox.
• Resend — delivers enquiry form submissions to me by email.
• My email provider — where your message ends up so I can read and reply to it.

Some of these providers are based outside the UK, including in the United States. Where information is transferred internationally, it is protected by the safeguards permitted under UK data protection law, such as standard contractual clauses or an adequacy decision.

I may also disclose information if I'm legally required to.

05How long I keep it

• Enquiries that don't lead to work — kept for up to 12 months, then deleted.
• Enquiries and correspondence that do lead to work — kept for the duration of the project and for 6 years afterwards, which is the period I'm required to retain business records for tax purposes.
• Technical logs — retained briefly by the hosting provider and then automatically discarded.

06Storage on your device

This site stores one thing in your browser: whether you've chosen the light or dark version of the site, so it stays that way as you move between pages. It's set only when you use the toggle, contains no personal information, and never leaves your device.

There are no advertising or tracking cookies, which is why you haven't been asked to accept anything. Clearing your browser data removes the preference.

07Your rights

Under UK data protection law you can ask me to:

• Give you a copy of the information I hold about you
• Correct anything that's wrong
• Delete it
• Restrict or stop processing it
• Provide it in a portable format

You can also object to processing I'm carrying out on the basis of legitimate interests.

Email me and I'll respond within one month. There's no charge, and you don't need to give a reason.

08Complaints

If you're unhappy with how I've handled your information, please tell me first and I'll try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

09Changes

If this notice changes, the updated version appears here with a new date below.

Last updated [date]