Last updated · 6 November 2026
Privacy notice
This notice explains how andyscottux ltd handles information when you visit andyscott.digital or make an enquiry.
Who is responsible
This website is operated by andyscottux ltd, trading as Andy Scott Digital, company number 12355513. Registered office: 2 Bourdon Street, Manchester, M40 7DB. For privacy requests, email me@andyscott.digital with the subject PRIVACY REQUEST. We aim to acknowledge your request within five working days; this is an acknowledgement target, not a promise to complete every request within that time.
Information you provide
The contact form asks for your name, email address and brief. You can also provide your company, budget and attachments. Please only include information needed to discuss your enquiry, and avoid sending sensitive information or other people’s personal data.
- Enquiry details are used to respond to your request and discuss potential work. We do not currently use enquiry details to send marketing emails.
- The contact system can record an IP address and browser information for security and abuse prevention.
- A separate agreement may cover information shared during a commissioned engagement.
Why we use your information
- For an individual asking about or buying our services: taking steps at your request before a contract and performing the agreed contract, where necessary.
- For contacts acting for a business or organisation: our legitimate interests in responding to enquiries and managing business relationships, subject to an assessment of your rights and reasonable expectations.
- For proportionate security and abuse prevention: our legitimate interests in protecting the website and enquiry service, subject to a balancing assessment.
- For accounting and tax records: compliance with legal obligations. Analytics cookies use your consent. Cookieless measurement and performance monitoring are described below and in our cookie policy.
Website measurement and preferences
The website uses Google Analytics with a consent control. Advertising cookies are disabled. The current setup allows cookieless measurement signals before a choice is made and after analytics cookies are rejected. Your analytics preference is remembered in browser storage for 180 days. Vercel Speed Insights is also included to measure website performance. See the cookie policy for more detail.
Suppliers and storage
The website uses Vercel hosting and attachment storage, Resend for enquiry email notifications, Apple iCloud Mail to receive and store enquiry emails, and Neon PostgreSQL, connected through Vercel, for enquiry records. Google Analytics measures website use, and Vercel Speed Insights measures website performance. Enquiry information is otherwise accessed by Andy, with relevant information shared with people working on your project where needed for that work. The Neon database and Vercel attachment store are configured in the iad1 region in the United States. This means enquiry records and attachments are stored outside the UK. Vercel and Resend publish data-processing terms with contractual safeguards for UK transfers, including standard contractual clauses and a UK addendum. Neon’s current platform schedule refers to Databricks terms. Apple and Google also publish information about international processing and transfer safeguards. Links to suppliers’ published terms are provided below; these links do not represent independent verification of the arrangements applying to every account. For information about the arrangements relevant to your data, email me@andyscott.digital with the subject PRIVACY REQUEST.
How long we keep enquiries
Our retention policy is to delete unsuccessful enquiries and their attachments 12 months after the last contact. Deletion is managed manually. Andy reviews the last contact date and whether an enquiry became commissioned work, then removes expired unsuccessful enquiries from the website database, attachment storage and email records. The website does not automatically delete enquiries. Deletion from active systems does not necessarily remove information immediately from supplier backups or recovery systems; those copies remain subject to the relevant supplier’s retention arrangements. Invoices and supporting accounting records are normally retained for six years from the end of the company financial year they relate to, and longer where required by tax rules, an enquiry or another legal obligation. Other client information is retained only as long as needed to deliver the engagement, meet agreed contractual requirements or establish, exercise or defend legal claims; it is then deleted or anonymised. Detailed project-specific retention arrangements are agreed separately.
Your information and your choices
You can email me@andyscott.digital with the subject PRIVACY REQUEST to ask about access, correction, deletion, restriction, objection or data portability, where those rights apply. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing. These rights depend on the circumstances and the basis for processing. You can change your analytics choice using the Cookies control. You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk.