Privacy Policy — TOBR Digital

Before publishing this: this is a starting template, not legal advice — I'm not a solicitor. Since this site collects personal data via contact and booking forms, get it properly reviewed (a solicitor, or a template service like Rocket Lawyer/Sparqa) before going live, and make sure it matches your actual ICO registration details once you have them.

Last updated: 23/08/2026

1. Who we are

TOBR Digital ("we", "us"), operated by Tom Bradshaw, operates this website. We are the data controller for the personal information described below. You can contact us at hello@tobrdigital.co.uk with any questions or requests about your data.

2. What data we collect

When you use the contact or booking forms on this site, we collect:

Your name
Your email address
Your phone number (where provided)
Your business name (where provided)
Any message or details you choose to include

We do not collect payment card details directly — these are handled securely by our payment providers (Stripe and/or GoCardless), who process that information under their own privacy policies.

3. Why we collect it

We use this information to respond to your enquiry, provide quotes, deliver the services you've requested, and manage any ongoing hosting or maintenance plan. Our legal basis for this processing is legitimate interest (responding to enquiries) and contract (where you've engaged us for services).

4. Who we share it with

We use the following third-party services to run this website and our business, each of which may process your data on our behalf:

Formspree — processes form submissions from this site
Stripe and/or GoCardless — process payments for clients with an active plan
Google Workspace — used for email and calendar management
Cloudflare — provides hosting and security for this website

We do not sell or share your data with any third party for their own marketing purposes.

5. How long we keep it

We keep enquiry data for as long as reasonably needed to respond to you, and client data for the duration of our working relationship plus a reasonable period afterward for accounting and legal purposes (typically [6 years], in line with UK record-keeping requirements).

6. Your rights

Under UK GDPR, you have the right to:

Ask what personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data, where we're not legally required to keep it
Object to how we're using your data
Complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data

To exercise any of these rights, contact us at hello@tobrdigital.co.uk.

7. Cookies

This website does not use tracking or advertising cookies. [Update this section if you later add analytics tools like Google Analytics, which do use cookies and would need to be disclosed here along with a cookie consent banner.]

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.