Privacy and cookies

Who I am

I’m Jack Firmin, trading as Firmin Design. I am responsible for how personal data collected through this website is used.

For privacy questions or requests, email [email protected].

Enquiries

When you contact me, I receive the details you provide, such as your name, email address, company, project requirements and budget. I use these to reply, prepare proposals and deliver any work we agree.

My lawful basis for general and business enquiries is my legitimate interest in responding to potential clients and running my business. Where you are an individual requesting a quote or services for yourself, I rely on taking steps towards a contract or fulfilling that contract. I rely on legal obligation for records I am legally required to keep.

Formspree processes contact form submissions, which are delivered to my Gmail inbox. Copies may be stored by Formspree and Google.

I keep enquiries while discussions are active, then delete them when no longer needed for follow-up, an agreed project or resolving a complaint. Client records may be kept longer where needed for accounting, legal requirements or disputes.

You choose whether to contact me, but I need enough information to respond.

Analytics and cookies

With your consent, I use Google Analytics to understand visits and improve this website. It collects information such as pages visited, interactions, referral sources, device details and approximate location. Cookie identifiers and related information can count as personal data.

Google Analytics cookies are not set until you accept analytics cookies. If you reject them or leave the banner unanswered, no Google Analytics cookies are set. However, the Google scripts still load, and Google may receive limited, anonymous information that a page was visited (such as the page address and your IP address, device and browser details), without cookies and without being linked to you across visits. I do not use advertising cookies.

Analytics cookie expiry may refresh when you return. Relevant user and event data is retained in Google Analytics for 14 months; this setting does not cover standard aggregated reports.

You can withdraw consent using Cookie settings in the footer. This stops future cookie-based analytics without affecting the lawfulness of earlier collection. You can also delete cookies in your browser.

Hosting and service providers

Cloudflare hosts and helps secure this website. It may process technical information, including IP addresses and requests, to deliver the site and prevent abuse. My lawful basis is my legitimate interest in operating a secure, reliable website. Technical records are kept according to service settings and operational or security needs.

Fonts are served without requests to Google’s font servers.

Processing outside the UK

Google and Cloudflare may process personal data outside the UK, including in the United States.

For Google Analytics, Google uses the UK Extension to the EU–US Data Privacy Framework for qualifying UK-to-US transfers. Where an applicable transfer framework is not used, its terms provide for Standard Contractual Clauses where required. See Google’s Analytics transfer arrangements (opens in a new tab). Google’s wider arrangements, relevant to my Gmail inbox, are described in its general transfer information (opens in a new tab).

Cloudflare’s customer Data Processing Addendum provides for the Data Privacy Framework, including its UK Extension, for qualifying transfers. Where contractual safeguards are required for UK data, it uses EU Standard Contractual Clauses with the ICO’s UK Addendum. See Cloudflare’s Data Processing Addendum, section 6 (opens in a new tab).

You can read the relevant transfer terms through these links or email me for further information or a copy of applicable safeguards.

More information: Google (opens in a new tab), Formspree (opens in a new tab) and Cloudflare (opens in a new tab).

Your rights

Depending on the circumstances, you can ask to access, correct, delete, restrict or receive a portable copy of your personal data, and withdraw consent where I rely on it.

You also have the right to object to processing based on legitimate interests.

These rights are subject to legal conditions and exceptions. Email me to make a request. You can also complain to the Information Commissioner’s Office (opens in a new tab).

I will update this page when my data practices change.