1. Who this policy applies to
Szymik Digital is the public brand used by Richard "Ric" Szymik for founder-led website, digital presence, and practical systems work. The studio is based in Based in Todmorden, West Yorkshire - UK-based and remote-friendly.
This policy applies when someone visits the website, sends an enquiry, discusses a project, becomes a client, or otherwise communicates with Szymik Digital about its services.
2. Information collected through enquiries
Depending on how someone uses the website or gets in touch, Szymik Digital may collect:
Name, email address, business name, website URL, project details, and message content sent through the enquiry form or by email
Any information shared during project discussions, calls, proposals, or support conversations
Technical information that may be created by normal website hosting, such as IP address, device details, browser information, and basic security logs
3. Client project information
If a project moves forward, Szymik Digital may also receive project information needed to deliver the agreed work. This can include:
Website access details, hosting or domain information, and other logins where they are needed to deliver agreed work
Brand assets, documents, copy, images, website content, and project files supplied by a client
Notes, approvals, feedback, invoices, and other records needed to manage the project or keep business records
Credentials and access details are requested only when they are needed for delivery. Where practical, access is removed, returned, or updated when the project ends unless ongoing support has been agreed.
4. How information is used
Personal information may be used to:
Respond to enquiries and direct messages
Prepare quotes, proposals, recommendations, and project scopes
Deliver agreed website, digital presence, support, or systems work
Keep business, accounting, project, and communication records
Maintain the security, reliability, and basic operation of the website and services
5. Lawful basis
Where UK data protection law applies, Szymik Digital will usually rely on one or more of the following lawful bases:
Legitimate interests in responding to enquiries, running the business, improving services, and keeping appropriate records
Steps requested before entering into a contract, such as discussing a project or preparing a quote
Contract where information is needed to deliver agreed work
Legal obligation where records need to be kept for tax, accounting, or regulatory reasons
Consent where a specific optional activity requires it
6. Sharing and processors
Szymik Digital does not sell personal information. Personal information may be shared with trusted service providers where needed to operate the website, communicate with clients, or deliver services. This may include:
Website hosting and infrastructure providers that keep the website available and secure
Email providers used to receive, send, and store project communication
Project, admin, storage, invoicing, accounting, or support tools where they are used to run the business or deliver work
Professional advisers if needed for accounting, legal, insurance, or compliance reasons
7. Cookies and analytics
The current public website is intended to stay lightweight and does not intentionally use non-essential marketing cookies or a backend contact-form database. Basic technical logs may still be created by website hosting and security systems as part of normal operation.
If analytics, tracking, advertising pixels, or similar tools are introduced later, this page will be updated so visitors can understand what is being used and why.
8. Retention and security
Personal data is kept only for as long as necessary to respond to enquiries, prepare quotes, deliver services, keep business records, meet legal or accounting obligations, resolve disputes, or provide agreed support.
Enquiry information that does not become a client project is not kept longer than needed. Client project records may be kept for longer where they are needed for accounting, contractual, support, or record-keeping reasons.
Szymik Digital takes reasonable steps to protect personal information, including limiting access to project information, using appropriate account security, and handling credentials carefully.
9. Your rights
Depending on the applicable law, individuals may have rights to access, correct, delete, restrict, object to, or transfer their personal data. They may also have the right to withdraw consent where processing is based on consent.
If UK data protection law applies, individuals may also have the right to complain to the Information Commissioner's Office.