Your data

1. Who I am

Professor Design is a one-person studio in Leicester that builds landing pages for trades businesses. I am in charge of the personal data I collect through this website (www.professordesign.co.uk) and through my work with you.

When I build and run a landing page for a client, the data their visitors leave (names, phone numbers, messages) belongs to the client, not me. I just look after it for them. Same goes when I run their Google or Meta Ads.

Got a question? Email prof@professordesign.co.uk.

2. What I collect

When you fill in a form or send me a message:

  • Your name, email, phone, business name and trade
  • Anything you type into a form or send me in an email
  • Billing details (I do not store the full card number; the payment provider does)

Automatically when you visit this site:

  • Your IP address, browser, device type and rough location
  • Pages you look at, what you click, how long you spend, where you came from
  • Cookies (more on those in section 5)

If you become a client:

  • Access to your analytics, ad accounts and form data so I can do the job
  • Leads that come in through pages I built for you, which I look after on your behalf

3. What I do with it

The law makes me tell you my "lawful basis" for using your data, which is just fancy talk for why I am allowed to:

  • To reply to you and do the work you have asked for. Basis: I have a contract, or am about to.
  • To send you project updates, invoices and reports. Basis: contract.
  • To make this site better and measure my marketing. Basis: legitimate interest in running the business. You can tell me to stop at any time.
  • To send the odd email about new services, only if you have asked or the law allows. Basis: legitimate interest. You can unsubscribe at any time.
  • To do my taxes and follow the law. Basis: legal obligation.

I do not sell your data. Ever.

4. Who I share it with

I use other companies to run the business. They handle some of your data for me, under written agreements. The main ones:

  • Netlify hosts this site and handles the contact form
  • Google for Analytics, Tag Manager and Google Ads
  • Meta for Facebook and Instagram Ads, when I run Traffic for a client
  • Accounting, invoicing and email tools to keep the business running

I only share what they need to do the job. I may also have to share data if the law makes me, or to defend myself in a legal claim.

5. Cookies and tracking

Cookies are small files your browser stores. This site uses them to see how people use the site and how my marketing is doing. Some are essential to make the site work. Analytics and marketing cookies are only used where the law allows.

When I run ads for a client, I put a Google Ads tag and a Meta Pixel on the client's landing page so I can see which ads turn into leads. The client adds a cookie banner on their own site to tell visitors. I help them get that right.

You can block cookies in your browser settings. Blocking analytics cookies will not break this site.

6. Where your data goes

Some of the companies above (Google, Meta) are based in the US, so your data may leave the UK. When that happens, I make sure the transfer uses safeguards the UK government accepts: the UK's data transfer agreement, the EU's standard clauses, or an "adequacy" approval. The providers themselves publish how they handle this.

7. How long I keep it

  • Leads and email chat with me: while it is still useful, then deleted. Sooner if you ask.
  • Client records and invoices: 6 years after the work ends, because UK tax law makes me.
  • Website analytics: up to 14 months (the maximum Google Analytics allows).
  • Marketing list: until you unsubscribe.

8. Your rights

Under UK GDPR, you can ask me to:

  • Show you what I hold about you
  • Fix anything that is wrong
  • Delete it, where I am not legally required to keep it
  • Stop or limit how I use it
  • Hand it over in a portable file
  • Withdraw consent, where consent was the basis

Email prof@professordesign.co.uk and I will come back to you within a month.

If I have messed up and you would rather complain, you can go to the UK's Information Commissioner's Office (ICO) at ico.org.uk. I would rather you let me fix it first.

9. Keeping your data safe

I protect your data with HTTPS encryption, password-protected accounts and trusted suppliers. Nothing online is 100% safe and I cannot promise it can never be hacked, but I take it seriously.

10. Changes to this policy

I may update this from time to time. The date below shows the latest version.

Last updated: May 2026