Privacy notice
Last updated 26 September 2026
This explains what personal information I collect when you use this website or get in touch, what I do with it, and the choices you have. I keep it to the minimum I need, and I don’t sell it or use it for marketing.
Who I am
I’m Andrew Tebbott, trading as StillHuman Design. I’m the “data controller”, which means I decide why and how your personal information is used. You can contact me at hello@stillhumandesign.co.uk.
What I collect, and why
| When | What | Why |
|---|---|---|
| You send me a message through the contact form | Your name, email address, the type of help you’re after, your message, and the time you sent it | To read your enquiry and reply to it |
| You email me | Your email address, your name if it’s in your email, and whatever you write to me | To reply, and to run a project if we work together |
| You visit the website | Standard technical details my web host records automatically, such as your IP address, browser type, the pages requested and the time | To deliver the site, keep it secure and fix faults |
| You submit the form | A scrambled (hashed) version of your IP address and the time, kept briefly on the server | To stop spam and abuse of the form, for example someone sending it hundreds of times |
Cookies and tracking: this site doesn’t set any cookies, and it doesn’t use analytics, advertising or tracking tools. The fonts and images are hosted on this site, so your browser doesn’t contact other companies just by loading it.
You don’t have to give me any of this. If you’d rather not use the form, you can email me instead.
My legal basis
- Taking steps at your request, or preparing a contract (UK GDPR Article 6(1)(b)): when you ask me about a project, I need your details to answer and to prepare a quote.
- Legitimate interests (Article 6(1)(f)): for keeping the website secure and preventing spam. I’ve weighed this against your rights, and it uses very little information.
- Legal obligation (Article 6(1)(c)): if we work together, I have to keep invoices and accounting records.
Who I share it with
I don’t sell your information, and I don’t share it for marketing. Other companies handle it only to provide the services I use, under their own data protection terms:
- Hostinger, who host this website, process the contact form and keep server logs.
- 123 Reg (part of GoDaddy), who provide my email. Your messages to me, and my replies, are stored in that mailbox.
I may also share information if the law requires it, for example if I’m legally ordered to.
How long I keep it
- Enquiries that don’t lead to work: up to 12 months, then I delete them.
- Clients: project emails and files for as long as the work and any support continue, plus a reasonable period afterwards. Invoices and accounting records are kept for 6 years, as tax law requires.
- Spam-protection data: about an hour.
- Server logs: kept by my host for a short period, under its own policy.
Where it’s processed
My hosting and email providers may process information on servers outside the UK. Where they do, they must protect it to a standard equivalent to UK data protection law, for example through approved contractual safeguards.
Your rights
You can ask me at any time to:
- tell you what personal information I hold about you, and give you a copy
- correct anything that’s wrong
- delete your information (unless I have to keep it by law)
- restrict how I use it, or object to how I use it
- give you your information in a portable format, where that applies
Email hello@stillhumandesign.co.uk and I’ll reply within one month. There’s no charge.
If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Keeping it safe
The site is served over HTTPS. The contact form checks what it receives, limits how often it can be used, and sends your message straight to my email. My email and hosting accounts are protected by passwords that only I use. No system is perfectly secure, but I take reasonable steps to protect your information.
Links to other sites
Some pages link to other websites, such as the projects I’ve worked on. They have their own privacy notices, and I’m not responsible for them.
Changes to this notice
If I change how I use personal information, I’ll update this page and the date at the top.