Privacy policy

Last updated 9 September 2026

JxD Collective is a sole trader web design business run by Josh Davies. This policy explains what personal information the site collects, why it is collected, and what happens to it. It applies to jxdcollective.co.uk and to enquiries made through it.

For the purposes of UK data protection law, JxD Collective is the data controller for the information described here.

Who to contact

For anything to do with your personal information, including a request to see or delete what is held about you, get in touch:

What is collected

Information you give directly

When you complete the enquiry form, you choose to provide:

• Your name
• Your email address
• Your business name, if you give one
• Your current website address, if you give one
• What you need, and anything you write in the message box

Only your name and email address are required. Everything else is optional, and you should not include anything sensitive or confidential in the message box.

Information collected automatically

The site is hosted on Cloudflare. Cloudflare processes technical information as part of serving and protecting the site, including your IP address, browser type, the pages requested and the time of the request. This is used for security and to keep the site running, not to build a profile of you.

The enquiry form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile looks at signals from your browser and your IP address to make that judgement. It is not an advertising tool and does not track you across other websites.

Cookie policy

This site sets no analytics, advertising or tracking cookies. Nothing here follows you around the internet, and no data is shared with advertisers. That is why there is no cookie banner to click through.

What is actually stored

• Cloudflare Turnstile. The anti-spam check on the enquiry form may store a short-lived token in your browser so that a challenge does not have to be repeated. It exists to stop automated submissions and is not used for advertising or profiling.
• Cloudflare security. Cloudflare may set a cookie to identify trusted traffic and block malicious requests to the site.
• A note in your browser's own storage to remember that you have already seen the opening animation, so it does not play again every time you return in the same session. This never leaves your device.

All of the above are strictly necessary for the site to work and be secure. Under UK rules (the Privacy and Electronic Communications Regulations) strictly necessary storage does not require consent, which is why you are not asked for any.

The client websites shown in the portfolio

The work section displays real client websites inside frames. Those sites are loaded from their own addresses and could in principle set their own cookies. None of them currently run analytics or advertising tools.

Controlling cookies

You can block or delete cookies in your browser settings at any time. Blocking them may stop the enquiry form from being able to verify your submission.

If this changes

If analytics or any other non-essential cookies are ever added to this site, a consent banner will be added at the same time, with a genuine option to decline, and this page will be updated to list what each one does.

Third parties involved

A small number of other services are involved in running this site. Each one is listed below, with what it sees.

• Cloudflare hosts the site, delivers the enquiry email and provides Turnstile. It processes your IP address and the contents of your enquiry.
• Google Fonts serves the typefaces used on the page. Your browser requests these from Google's servers, which means Google receives your IP address when the page loads.
• Client websites shown in the portfolio. The work section displays real client sites inside frames. When those load, your browser connects to those sites directly and they may receive your IP address in the same way as if you had visited them.
• Email. Enquiries are delivered to a mailbox operated by the relevant email provider, where they are read and replied to.

Your information is never sold, rented or passed to anyone for marketing.

Why your information is used, and the legal basis

• To reply to your enquiry and discuss your project. Legal basis: legitimate interests, namely responding to someone who has asked to be contacted about work.
• To quote for and carry out work you go on to commission. Legal basis: performance of a contract, or steps taken at your request before entering one.
• To keep the site secure and working. Legal basis: legitimate interests, namely protecting the site from abuse and automated submissions.
• To keep business and tax records. Legal basis: legal obligation.

You will not be added to a mailing list, and no marketing emails are sent.

How long it is kept

• Enquiries that do not lead to work: kept for up to 12 months, then deleted.
• Client records for completed projects: kept for the life of the working relationship and then as long as needed for tax and accounting purposes, which is currently 6 years from the end of the relevant tax year.
• Server and security logs: retained by Cloudflare according to its own retention periods, typically a matter of days.

Where your information is held

Enquiry emails are stored in a mailbox that may be hosted outside the UK. Cloudflare and Google operate global networks, so some processing may take place outside the UK. Where that happens, those transfers are covered by the safeguards those providers have in place, such as the UK Addendum to the European Commission's standard contractual clauses.

Your rights

You have rights over the information held about you, including the right to see it, correct it, have it deleted and object to how it is used. These are set out in full, with how to use them, on the Your data rights page.

Children

This site is aimed at businesses and is not directed at children. Personal information is not knowingly collected from anyone under 18.

Changes to this policy

This policy may be updated from time to time. The date at the top shows when it last changed. Material changes will be reflected here rather than notified individually.

Complaints

If you are unhappy with how your personal information has been handled, please get in touch first so it can be put right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.