Wholeworks Digital Prices

Privacy notice

What I keep when you visit this site or get in touch, why, who else handles it, how long I keep it, and how to see it or have it deleted.

Last updated 24 September 2026.

In short

  • I use what you send me to reply and, if we work together, to do the work.
  • This site sets no cookies.
  • I count visits without cookies, and you can turn that off.
  • I never sell your details, add you to a mailing list or use them for advertising.
  • To see, correct or delete what I hold about you, email hello@wholeworksdigital.com.

Who is responsible for your details

Wholeworks Digital Ltd is responsible for your details: in the law's words, it is the controller. I'm Tom, the company's director. Where this page says "I", it means the company.

Email me about anything on this page at hello@wholeworksdigital.com.

Wholeworks Digital Ltd, registered in England and Wales, company number 17464622. Registered office: 30 Masterson Grove, Kesgrave, Ipswich, England, IP5 2DT.

What I collect, and why

When you email me or send the form

What
Your name, your email address, your website if you give it, and what you write. If you wrote a name in the stars at the end of the journey on the home page, that name comes with your message.
Why
To reply to you and, if we go on to work together, to agree what I'll do.
Lawful basis
Legitimate interests: answering people who get in touch. When you ask me about work, it's also a step you've asked for before we have a contract.

If you become a client

What
Your contact and billing details, our agreement, invoices and payments, and our emails about the work.
Why
To do the work, bill for it and keep the company's accounts.
Lawful basis
Our contract. Keeping the accounts is also a legal duty.

If I host or work on your site, any of your customers' details it holds stay yours: I handle them only on your instructions, under the data processing agreement I sign with you.

What every website sees

What
Your IP address, your browser and the page you asked for, which your browser sends with every visit to any website.
Vercel, which hosts this site, keeps these in technical logs for a limited time.
The small program that passes the form to my inbox also remembers your IP address for 10 minutes, to stop anyone flooding it.
Why
To run the site and keep it secure.
Lawful basis
Legitimate interests: keeping the site working and safe.

Counting visits

What
The page you looked at, the page you came from, the time, a rough location (country, region and town or city), your device type, and your browser and operating system with their versions.
Vercel counts these for me with no cookies. It tells visits apart with a code made from your request, which it throws away after 24 hours, and it never ties a visit to your IP address or to you. I see totals, never who you are.
Why
To see which pages people read and how they find the site, so I can make it better.
Lawful basis
Legitimate interests: knowing how the site is used.

Your visits aren't counted if your browser asks sites not to track you (Global Privacy Control or Do Not Track), or if you press this button on this device.

You don't have to give me any details. Without an email address I can't reply, and without a client's contact and billing details I can't do the work. Nothing about you is decided automatically.

Cookies, and what stays on your device

This site sets no cookies.

The journey on the home page keeps a few small notes in your browser's session storage: whether you turned the sound on, whether you chose "Play the journey" when your device asks for less motion, and, if your device's graphics reset, when that happened and where you had got to, so the page can reload and pick up where you were. These notes never leave your device, and they go when you close the tab.

If you press "Don't count my visits", the site keeps one note in your browser's local storage, so it remembers your choice on this device. It never leaves your device, and clearing this site's data removes it.

The name you write in the stars is drawn by your browser. It isn't saved or sent anywhere, and it only reaches me if you then send me the form or an email.

Who else handles your details

  • Google runs my email (Google Workspace). Every email and every form you send arrives in my Google inbox.
  • Vercel hosts this site, runs the small program in London that passes the form to my inbox, and counts visits.
  • If you become a client, my bookkeeping software and my business bank handle your invoices and payments, and my accountant sees them when preparing the company's accounts.

Google and Vercel handle your details for me under the data protection terms in their contracts with me. I never sell your details, never add you to a mailing list and never use them for advertising.

Where your details are kept

The program that sends the form to my inbox runs on Vercel's servers in London.

Google, Vercel and the company behind my bookkeeping software are American, so your details may also be handled in the United States. All three are signed up to the UK Extension to the EU-US Data Privacy Framework, which UK law accepts as keeping personal data protected when it goes to a company that has signed up. I checked the official list on 24 September 2026. Google and Vercel also use their own companies and suppliers in other countries. Where UK law has not approved a country, their contracts with me use the transfer terms UK law requires.

How long I keep it

  • Enquiries that don't become work: deleted after 12 months.
  • Client records: six years from the end of the company's financial year in which the work ends, because that is how long a company must keep its tax records.
  • Hosting logs are kept by Vercel for a limited time.
  • Your IP address, when you send the form: 10 minutes, to stop anyone flooding it.
  • Visit records: shown to me for 12 months, and they hold nothing that identifies you.

Your rights

You can ask me to:

  • show you what I hold about you, and give you a copy
  • correct anything that's wrong or missing
  • delete it
  • stop using it for anything I do on the grounds of legitimate interests
  • pause using it while something is put right
  • send what you gave me to you, or to another company, in a common format

To ask, email hello@wholeworksdigital.com. It's free, and I reply within one month. I may ask you to confirm who you are before I send anything.

If you're unhappy with how I've handled your details, please email me first at hello@wholeworksdigital.com: I'll confirm I've got it within 30 days and tell you what I've done about it. You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.

Changes to this notice

If what I do with your details changes, I'll update this page and the date at the top.