Privacy Policy
How we handle, protect, and respect your personal data under UK GDPR.
Last updated: September 2026
Privacy Policy Details
Who we are
This site is run by Harry Yelland, trading as Yelland Digital ("we", "us"), based in Norwich, UK. We are the controller of the personal data described in this policy. For any questions about it or your data, contact us at hello@yellanddigital.co.uk.
What we collect
When you use our contact form, we collect the name, business name, email address, phone number and project details you choose to give us. We don't ask for anything else, and there's no account to create.
If you use our website package finder and choose to send your answers to us, the answers you gave (for example the type of project, size and email needs) are added to the message box on the contact form for you to review, edit or delete before you send it. Nothing is sent to us until you submit the contact form yourself.
Downloading our guides and checklists doesn't require you to give us any details, and we don't record who downloads them.
Our hosting and content delivery provider (Cloudflare) automatically processes standard technical data for every visitor, such as IP address, browser type and request timestamps, to keep the site secure and running. We don't access this data ourselves beyond basic traffic reporting.
Information stored in your browser
The package finder temporarily saves your answers in your browser's session storage so that they can be carried across to the contact form if you choose to get a quote. This stays on your device, isn't sent to us until you submit the contact form, and is cleared when the contact form loads it or when you close the tab. We also store a single preference in your browser's local storage to remember your cookie choice. Neither is a cookie. See our cookie policy for more detail.
Spam protection
To protect the contact form from automated abuse, we use Cloudflare Turnstile. It runs a check in your browser when you use the form and may process technical information such as your IP address and browser details to tell people from bots. Cloudflare handles this data under its own privacy policy.
Analytics
With your consent, we use Microsoft Clarity to see how visitors use this site, through heatmaps and session recordings of things like clicks, scrolling and page navigation. Clarity only runs if you accept the cookie notice, and Microsoft may process this data outside the UK under its own privacy statement. See our cookie policy for exactly what's collected and how to change your choice.
We also use Cloudflare Web Analytics for aggregate visitor numbers and page views. It's cookieless and doesn't identify you individually, so it runs regardless of your cookie choice. See our cookie policy for more detail.
Why we use your data, and our lawful basis
We use contact form details only to respond to your enquiry and, if you become a client, to deliver the work you've asked for. Our lawful basis is our legitimate interest in replying to people who contact us and running a functioning business, and, where you go on to ask for our services, taking steps at your request to enter into a contract. Where we rely on your consent, such as for Microsoft Clarity analytics, you can withdraw it at any time. We never sell your data or use it for marketing without asking first.
Who we share it with
We don't share your data with third parties for marketing. Some of it necessarily passes through service providers acting on our behalf purely to deliver the service:
- Cloudflare - hosting, security, spam protection (Turnstile) and cookieless analytics.
- Resend - the email service that delivers your enquiry to us and sends you an automatic confirmation copy.
- Microsoft Clarity - analytics, only if you accept the cookie notice.
Some of these providers are based in, or process data in, countries outside the UK, including the United States. Where this happens, we rely on the safeguards each provider offers under UK data protection law, such as the UK-US data bridge or standard contractual clauses.
How long we keep it
We keep enquiry details for as long as needed to respond to you, or for the length of any client relationship that follows, and delete them once they're no longer needed. If an enquiry doesn't lead to any work, we'll delete it within 12 months. Records we're legally required to keep, such as invoices for clients, are kept for as long as the law requires, which is usually six years.
Your rights
Under UK GDPR, you can ask us to access, correct, delete or restrict the personal data we hold about you, object to how we use it, or ask for a copy in a portable format. Contact us at hello@yellanddigital.co.uk to do this, and we'll respond within one month. If you're unhappy with how we've handled your data, you can also complain to the Information Commissioner's Office (ico.org.uk).
Changes to this policy
We'll update this page whenever what we collect or how we use it changes, for example when we introduce new tools, and update the date at the top.