Privacy and cookie policy
Last updated: 10 October 2026
This policy explains what personal information I collect when you use digitalheroes.studio, why I collect it, and what your rights are. I've tried to keep it short and in plain English.
Who I am
Digital Heroes Studio is run by me, Thomas (Tom) Watts, a sole trader based in Saltdean, Brighton and Hove, UK. I'm the "data controller" for the personal information described here.
Address: 36 Falmer Avenue, Saltdean, Brighton BN2 8FG
Email: tom@digitalheroes.studio
What I collect
When you send an enquiry. Your name, email address, phone number (if you give it), what you need help with, and your message.
When you book a call or a Hero Hour. Your name, email address, your website address, your answers to the booking questions, and the date and time you choose. Bookings are handled by Cal.com.
When you pay for a Hero Hour. Payments are handled by Stripe. I see your name, email address and that you've paid. I never see or store your card details.
When you use the speed test. The website address you enter is sent straight to Google's PageSpeed Insights, which opens in a new tab. I don't receive or store it.
When we work together. Anything you share with me during a project, such as logins, content and correspondence, which I use only to do the work.
Technical information. Like most websites, my hosting provider (Cloudflare) automatically processes technical information such as your IP address and browser type to deliver the site and protect it from attacks.
Visitor statistics. I use Cloudflare Web Analytics to see how many people visit the site and which pages are popular. It doesn't use cookies, doesn't track you across other websites, and doesn't collect information that identifies you.
Why I use it, and the legal basis
- To reply to your enquiry and talk about your project. Legal basis: legitimate interests (responding to people who get in touch), or taking steps at your request before entering into a contract.
- To manage bookings, payments and client work. Legal basis: contract.
- To keep financial records. Legal basis: legal obligation (tax and accounting rules).
- To run and secure the website. Legal basis: legitimate interests.
Marketing
I don't send newsletters or marketing emails. If that ever changes, I'll only email you if you've opted in, and every email will have a one-click unsubscribe link.
Who I share it with
I never sell your information. I only share it with services that help me run the business, and only what they need:
- Cloudflare: website hosting and security
- Formspree: delivers contact form submissions to my inbox
- Cal.com: booking calls and Hero Hours
- Stripe: taking payments
- Google: runs the PageSpeed Insights speed test (receives only the web address you enter)
- Google Workspace: my email
- Cloudflare Web Analytics: anonymous visitor statistics
- My accountant: for financial records, where needed
If I bring in a trusted specialist to help on your project, I'll tell you first, and they'll only see what they need for the job.
Transfers outside the UK
Some of these services are based in, or store data in, the United States or elsewhere outside the UK. Where that happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.
How long I keep it
- Enquiries that don't lead to work: up to 2 years, then deleted
- Client records and invoices: 6 years after our work ends, as required for tax purposes
- Booking records: as long as Cal.com and Stripe keep them under their own policies, and in my records as above
Keeping it safe
I use reputable services with strong security, two-factor authentication on my accounts, and I only keep what I need.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information I hold about you (free of charge)
- ask me to correct anything that's wrong or incomplete
- ask me to delete your information
- ask me to restrict or stop using your information
- object to how I'm using it
- ask for your information in a portable format
- withdraw consent at any time, where I'm relying on consent
Email me at tom@digitalheroes.studio and I'll respond within one month.
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies
Cookies are small files a website stores on your device.
This site only uses cookies that are strictly necessary to deliver and protect it, such as security cookies set by Cloudflare. These don't track you and don't need your consent.
I don't use advertising, remarketing or social media tracking cookies.
My visitor statistics don't use cookies either, which is why there's no cookie banner on this site. If I ever add anything that needs your consent, I'll ask first.
Other services. When you click through to book on Cal.com, pay with Stripe, or open my Google Maps listing, those sites may set their own cookies under their own policies.
Managing cookies. You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site working properly.
Links to other websites
This site links to other websites, including client sites and case studies. This policy only covers digitalheroes.studio, so please check the privacy policy of any site you visit.
Changes to this policy
I'll update this page if anything changes, and change the date at the top.
Contact
Questions about this policy or your information? Email me at tom@digitalheroes.studio.