Privacy Policy
This policy explains what we collect, why, and what you can ask us to do about it.
Who we are
Day One is a website design and SEO subscription service built in Bristol, working with businesses across the South West and beyond. We are the data controller for the personal data described in this policy. You can reach us through thecontact form.
What we collect
Through the free mockup form: whether you have a website, your domain or a description of your business, how often you change your website, how far you want to reach, and your name, email address and optional phone number. Through the contact form: your name, email address, optional business name and your message.
We also collect anonymised usage data through Google Analytics 4, such as pages viewed and approximate location, but only if you consent to analytics cookies. We do not collect special category data and we do not take payment details through this website.
Why we collect it, and our lawful basis
We use your form data to build and send the mockup you asked for and to reply to your enquiry. The lawful basis for this is our legitimate interest in responding to people who contact us, balanced against your rights. If you go on to become a client, we process your data because it is necessary to perform our contract with you. Analytics data is processed on the basis of your consent, which you can withdraw at any time through the cookie settings.
Who we share it with
Our hosting and form provider, Netlify, processes form submissions on our behalf. Google processes analytics data on our behalf. Both act as our processors under written terms. We do not sell your data and we do not pass it to any other third party unless the law requires us to.
International transfers
Netlify and Google are US companies, so some data may be processed outside the UK. Where that happens, transfers are protected by safeguards recognised under UK GDPR, including the UK Extension to the EU-US Data Privacy Framework and the International Data Transfer Agreement or Addendum where applicable.
How long we keep it
Enquiry and mockup data is kept for 24 months from your last contact with us, then deleted. If you become a client, we keep contract and correspondence records for as long as we work together and for up to six years afterwards, in line with limitation periods for contract claims. Analytics data follows Google's standard retention settings.
How we protect it
The site is served over HTTPS, form submissions are stored with our hosting provider under access controls, and access to submissions is limited to the people who need it to reply to you. We do not store your data on this website itself; it is a static site with no database.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, restrict or object to processing, ask for your data in a portable format, or withdraw consent for analytics. Ask through the contact form and we will respond within one month, free of charge. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This site sets no marketing cookies. Analytics cookies are only set with your consent, and session storage is used to remember that you dismissed the mobile call-to-action bar. You can change your cookie choice at any time, and you can also clear cookies through your browser settings.
Children
This website is aimed at businesses and we do not knowingly collect data from anyone under 18. If you believe a child has submitted data through our forms, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update this page and the date at the top. Material changes, such as a new processor or a new purpose for your data, will be flagged clearly here before they take effect.