Privacy
Privacy policy
Last updated 22 October 2026
- We only collect what we need to reply to you, quote, build and support your project, and get paid.
- This website uses no cookies and no tracking or analytics.
- We never sell your information or use it for anyone else's marketing.
- You can ask to see, correct or delete your information at any time.
Who we are
NailMaker Digital is the trading name of David Sweeney, a sole trader based in Halesowen, West Midlands. We build websites and apps for small businesses, clubs and trades. For the personal information described here, we are the controller, which means we decide how it's used and we're responsible for looking after it.
Questions about your information: [email protected]
What we collect
- When you get in touch: your name, email address, phone number if you give it, your business name, and whatever you tell us about your project.
- When you become a client: contact and billing details, the project brief and scope, our messages and meeting notes, and logins you choose to share with us so we can set things up.
- When you pay: what you paid and when. Card payments are handled by Stripe, so we never see or store your full card details.
- When you visit this website: our hosting provider, Cloudflare, keeps standard technical logs (such as IP address and browser type) to keep the site running and secure. We don't use cookies, analytics or advertising trackers.
- When you message us on social media: your profile name and what you send us.
Why we use it, and our lawful basis
| What we use it for | Lawful basis under UK GDPR |
|---|---|
| Replying to enquiries and preparing quotes | Steps you've asked us to take before a contract, or our legitimate interest in answering people who contact us |
| Building, launching and supporting your website or app | Performing our contract with you |
| Invoicing, taking payments and keeping accounts | Contract, and our legal obligations (for example HMRC record keeping) |
| Keeping the website and our systems secure | Our legitimate interest in running a safe, working service |
| Occasional updates about your project or care plan | Contract, or our legitimate interest in looking after existing clients. You can opt out at any time. |
We don't send marketing emails to people who haven't asked for them, and we don't make automated decisions about you.
Who we share it with
Only the services we need to run the business, each bound to protect your information:
- Apple (iCloud email and file storage)
- Google (Google Business Profile and, for some projects, app hosting)
- Cloudflare (website hosting, domains and email forwarding)
- Stripe (card payments) and Revolut (business bank account)
- GoCardless (Direct Debit for care plans, if you have one)
- Hosting and database providers used for your own project, which we'll tell you about in your quote
- An accountant, HMRC or our insurer, if we need to
Some of these providers process information outside the UK, including in the United States. Where they do, they use protections recognised under UK law, such as the UK–US Data Bridge or the UK's approved contract terms.
How long we keep it
- Enquiries that don't go ahead: up to 12 months, then deleted.
- Client project records: for as long as we work together, then up to 6 years.
- Invoices and payment records: 6 years after the end of the tax year they relate to, as required for tax.
- Logins you shared with us: deleted or handed back when the project or care plan ends.
When we build apps for you
If your website or app collects information about your own customers (for example bookings or contact forms), you are the controller of that information and we act as your processor. We only use it to build, host and support your project, on your instructions. Our client agreement includes data protection terms covering this.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that's wrong
- ask us to delete your information, unless we have to keep it by law
- object to or ask us to limit how we use it
- ask for your information in a format you can take elsewhere
Email [email protected] and we'll reply within one month. It's free.
Keeping it safe
We use two-step sign-in on our business accounts, keep passwords in a password manager, and only give access to people who need it to work on your project.
Complaints
If you're unhappy with how we've handled your information, please tell us first and we'll put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
We'll update this page if anything changes and show the date at the top.