Notes from the field.

Information you give us

We collect personal data that you choose to share with us when you:

• call us or write to us by post,
• ask for a quote or a consultation,
• commission a website, app or game from us.

This may include your name, phone number, postal address, company name and details about your project.

Information collected automatically

When you visit this website, our hosting provider may process technical server logs:

• IP address and browser type,
• operating system and device,
• pages visited and time of visit,
• the referring website.

These logs are used only to keep the website secure and running, and are deleted after a short period.

We use your personal data to:

• respond to enquiries and give advice – legitimate interests and steps before entering a contract (UK GDPR Art. 6(1)(b) and (f)),
• deliver and invoice our services – performance of a contract (Art. 6(1)(b)),
• meet legal obligations such as tax and accounting – legal obligation (Art. 6(1)(c)),
• keep this website secure – legitimate interests (Art. 6(1)(f)).

We only send marketing if you have clearly agreed to it (Art. 6(1)(a)), and you can withdraw that consent at any time.

We never sell your personal data. We share it only with:

• service providers – hosting, IT support, accountants – under written data processing agreements,
• authorities – where the law requires it,
• successors – for example in a merger or sale of the business.

When we build products for clients, we act as a processor for any personal data in those products and follow our client’s documented instructions. If data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement (IDTA).

This website does not use cookies, analytics or tracking technologies, and does not load content or fonts from third-party servers. Because nothing is stored on or read from your device, no cookie consent is needed under the Privacy and Electronic Communications Regulations (PECR).

If this changes, we will update this policy and ask for your consent where required.

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and disclosure – including encrypted connections, access controls and strong passwords. No transmission over the internet is completely secure, however.

This website may link to other websites. Their operators are solely responsible for their content and for how they handle personal data – please read their privacy policies.

This website is not aimed at children and we do not knowingly collect their data. When we build apps or games for younger audiences, we work with our clients to follow the ICO’s Age Appropriate Design Code – no behavioural advertising or tracking SDKs.

Under UK data protection law you have the right to:

• access your personal data,
• rectification of inaccurate data,
• erasure of your data,
• restriction of processing,
• data portability,
• object to processing,
• withdraw consent at any time.

We respond within one month. You can also complain to the Information Commissioner’s Office (ICO), www.ico.org.uk, tel. 0303 123 1113 – though we would appreciate the chance to resolve your concern first.

We keep accounting records for six years, as required by HMRC. Enquiries that do not lead to a contract are deleted after 12 months at the latest.

We may update this policy from time to time; the version on this page, with the date above, always applies.

The controller of your personal data is:

• Company: The Thicket at Huntingfield Ltd
• Registered office: Unit 3, 47 Knightsdale Road, Ipswich IP1 4JJ
• Director: Chelsea Wray
• Phone: 0998245395
• Post: Unit 3, 47 Knightsdale Road, Ipswich IP1 4JJ