Last updated: 3 September 2026

This privacy policy explains how Chris Allen Website Design ("I", "me", "my") collects, uses, stores and protects your personal data when you visit achris.co.uk and use my services. I'm committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller

The data controller responsible for your personal data is:

• Name: Chris Allen
• Email: chris@achris.co.uk
• Location: Essex, United Kingdom

2. What Data I Collect

Contact form submissions

When you submit the contact form, I collect:

• Your name
• Email address
• Phone number (if provided)
• Budget range (if selected)
• Your message

Form submissions are processed by Lumara Forms, a contact-form platform I built and operate myself. It stores a copy of your submission in its database, sends me a copy by email (delivered via Resend), and sends me a mobile notification via Pushover so I see new enquiries quickly. See "Data Retention" below for how long submissions are kept.

WhatsApp messages

If you contact me via WhatsApp, your message is handled by WhatsApp (Meta) under their own privacy policy.

Site analytics (Microsoft Clarity)

I use Microsoft Clarity to understand how visitors use this website (e.g. heatmaps and anonymised session recordings), so I can improve the site's design and content. Clarity is only loaded after you accept cookies via the banner on this site; if you decline or take no action, it is not loaded. Clarity sets cookies to recognise repeat visits and stitch a session together; Microsoft may process this data under their privacy statement. Session recordings mask on-screen text by default, so free text you type is not captured.

Google Ads conversion tracking

If you arrive at this website by clicking a Google Ads advertisement, I use Google Ads conversion tracking (gtag.js) to measure the effectiveness of my advertising. This only applies to visitors who arrive via a Google ad, and only once you accept cookies via the banner.

When loaded, Google may set cookies on your device to:

• Record that you visited from a Google ad
• Track whether you completed an action (e.g. submitting the contact form)

This data is processed by Google under their privacy policy. I receive only aggregated, anonymised reports. I cannot identify you personally through this data.

3. Lawful Basis for Processing

I process your personal data on the following legal bases:

• Legitimate interest: To respond to your enquiry and provide the services you've requested.
• Consent: For Microsoft Clarity and Google Ads conversion tracking cookies. You can withdraw consent at any time via "Cookie preferences" in the site footer, or by clearing your browser's cookies and local storage for this site.
• Contract: To fulfil services agreed upon between us.

4. Cookies

This website uses minimal cookies:

This site also uses Lumara Analytics and Plausible for pageview and click analytics; both are cookieless and don't require consent under PECR. Microsoft Clarity and Google Ads tracking above only load once you accept cookies via the banner.

5. How I Use Your Data

I use the personal data you provide to:

• Respond to your enquiry
• Discuss your project requirements
• Provide a quote or proposal
• Deliver the services we agree upon
• Measure the effectiveness of my Google advertising (aggregated, non-personal data only)
• Understand how visitors use this website, to improve its design and content (via Microsoft Clarity, where accepted)

I will never sell, rent, or share your personal data with third parties for marketing purposes.

6. Data Sharing

Your data may be shared with the following third parties, solely to provide the services described:

• Lumara Forms: Stores and forwards contact form submissions (a platform I built and operate myself).
• Resend: Delivers form-submission emails to my inbox on Lumara Forms' behalf.
• Pushover: Sends me a mobile notification when a new enquiry arrives.
• Microsoft: Receives anonymised session analytics via Microsoft Clarity, where accepted.
• Google: Receives conversion tracking data for visitors arriving via Google Ads.
• WhatsApp (Meta): If you choose to contact me via WhatsApp.

7. Data Retention

I retain your contact form data (in my email) for as long as necessary to respond to your enquiry and, if applicable, for the duration of our business relationship. If we don't proceed with a project, I'll delete your data within 12 months of your enquiry.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data I hold about you
• Rectify any inaccurate or incomplete data
• Erase your personal data ("right to be forgotten")
• Restrict the processing of your data
• Object to the processing of your data
• Data portability: receive your data in a structured format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email me at chris@achris.co.uk. I will respond within 30 days.

9. Data Security

This website is served over HTTPS (TLS encryption). I take reasonable measures to protect your personal data from unauthorised access, alteration, or destruction.

10. Children's Privacy

This website is not directed at children under 16. I do not knowingly collect personal data from children.

11. Changes to This Policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

12. Complaints

If you're unhappy with how I've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

13. Contact

For any privacy-related questions, contact me at chris@achris.co.uk.