Privacy and
your information.

Who handles your information

Samuel Tumilty, trading as Digital Weevil, is responsible for the studio's enquiry information. To contact me about your information, use the contact form and describe your privacy request. Please provide a reply address and the minimum information needed to explain the request.

What I collect and why

The general enquiry form asks for an email address and a short message, with an optional name. The separate detailed website brief also asks about business type, an optional existing website, scope, budget, timing, decision-making, content readiness and contact preference. Optional campaign/source tags record which campaign brought the enquiry; they are passed in the URL without browser storage. I use these details to review your request, reply and discuss possible work. Do not include health information, passwords, bank details or private customer records.

When you ask about a possible contract, the basis is taking steps at your request before entering a contract. For other business enquiries and privacy correspondence, I rely on legitimate interests in responding and managing the studio, or a legal obligation where applicable. You do not have to enquire, but I need a reply address to respond.

Website hosting and email

Netlify hosts the website and receives form submissions in the studio account. Its infrastructure also processes technical information such as IP addresses, page requests and browser details to deliver and protect the service. I use the account's Gmail service to reply when I respond. Access to enquiries is limited to the studio account and the providers operating these services.

These providers operate internationally, including in the United States. Netlify's data-protection information and privacy policy, and Google's privacy policy, explain their processing and safeguards. Their standard contractual arrangements address international transfers where required.

How long information is kept

The studio's policy is to review enquiries monthly and remove unsuccessful or inactive enquiry records within six months of the last meaningful contact, unless a dispute or legal duty requires longer retention. If we agree a project, the relevant contract, invoice and accounting records have separate retention requirements, explained with that work. Provider security logs and backups follow their own service policies; deleting an enquiry does not promise immediate removal from every backup.

Enquiry handling

Enquiries are stored in the studio’s Netlify account for review. I use Gmail to reply. Enquiries are reviewed personally; they are not automatically sent to a mailing list or an AI service.

Browser preferences and marketing

This site includes no analytics, advertising scripts, automated chat or mailing-list signup. It stores no browser preferences. Sending an enquiry does not subscribe you to marketing. A person reviews project suitability and pricing.

Your rights

You can ask to access or correct your information, or request deletion, restriction or portability where the relevant conditions apply. You can object to processing based on legitimate interests. I may need enough information to verify the request without disclosing someone else's records.

Use the contact form for a privacy question or request. You can also complain to the Information Commissioner's Office. This does not limit your other rights.

Optional free public PHP lookup

If you confirm you own a website or have permission, the free check sends its homepage address to a Netlify function. The function requests that public HTTPS homepage and may follow a limited redirect between the same domain and its www version. It reads bounded public headers and HTML for PHP or WordPress clues, including an advertised PHP version when present. It sends no login details, cookies or enquiry information to the target site and performs no exploit tests.

Our application does not save submitted addresses, fetched page content or lookup histories, and the free lookup does not add you to a mailing list or submit an enquiry. The target host sees the request, the function’s network address and its Digital Weevil user agent. Netlify processes normal request information, including visitor IP addresses for rate limiting, and providers may retain technical logs under their own policies. We use this information to provide the check you request and protect the service. Public banners can be hidden, stale or misleading; a person must confirm patch decisions with the host. The lookup uses no analytics, advertising cookies or external AI service.

Changes to this notice

If the enquiry workflow or providers change, I will update this notice. A client project that handles customer data needs its own agreed roles, scope and data-protection arrangements.

PHP security enquiries · 22 October 2026

The PHP security form collects your email and website address, optional name and comments, and the service you ask about. If you choose the enquiry link after a free check, the website address and short public-clue result are copied into the form. They are sent to Netlify only when you submit the enquiry; running the free check alone does not create an enquiry record. I use this information to assess suitability and reply. The same Netlify storage, restricted access, retention policy and rights described above apply. It does not start an automated scan or authorise website changes. Please do not submit credentials, private admin links or customer data. These enquiries are reviewed personally in Netlify.