Privacy Policy | Weymouth Software

1.

Who is responsible

The data controller is Dylan Jones, trading as Weymouth Software, Weymouth, Dorset, United Kingdom.
Questions or requests: hello@weymouthsoftware.co.uk.

2.

When you send a message: your name, email address and anything you write in the message.
While we work together: our emails, project details, quotes, invoices and any files or logins you share.
When you track an order: the reference and email you enter, used only to look up your project.
Basic technical data such as IP address and browser type, recorded briefly in server logs by my hosting provider for security.
I don’t use analytics, advertising or tracking tools, and I don’t build profiles of visitors.

3.

To reply to your enquiry and give you a quote: steps you asked me to take before a contract.
To deliver your project, send updates and invoice you: performance of our contract.
To keep records for tax and accounting: legal obligation.
To keep the site secure and prevent spam: legitimate interests.
I never sell your data or use it for marketing without your permission.

4.

I use a few trusted service providers to run the site. They only process your data on my instructions:
Vercel: website hosting (servers may be outside the UK).
Supabase: secure database for messages and project records.
Resend: sending emails to you.
Discord: private notifications to me when you send a message.
Where data is processed outside the UK, it’s protected by UK-approved safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

5.

Enquiries that don’t become projects: deleted within 12 months.
Client projects and invoices: kept for 6 years after the project ends, as required for tax records.
Server logs: kept by the hosting provider for a short period, usually days.

6.

You can ask to access, correct or delete your data, to restrict or object to how it’s used, or for a copy to take elsewhere.
Email hello@weymouthsoftware.co.uk and I’ll respond within one month.
If you’re unhappy with how I handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk), but please contact me first so I can put it right.

7.

Data is sent over encrypted connections (HTTPS), stored in an access-controlled database, and only I can see it.

8.

If this policy changes, the new version will be posted here with an updated date.