Privacy Policy

Last updated: 17 August 2026

This page explains what personal information Merritt Digital collects, why, and what we do with it. We collect as little as possible.

Information you give us

• When you apply or enquire: your name, email address, optional phone number, your business name and website, and whatever you tell us about the work you want.
• When you become a client: the material you send us for your website, plus the correspondence between us.

What we use it for

Only to answer you, to do the work, and to invoice for it. We do not sell personal information, we do not share it for advertising, and we do not send marketing email to people who have not asked for it.

Payments

Payments are handled by Stripe. Card details are entered with Stripe and are never sent to or stored by us — we see only the fact of a payment and the details needed to account for it. Stripe processes that information under its own privacy policy.

Other companies involved

Running a website and a small business means a few other services necessarily see some data: our email provider, our payment processor, and — where a website we built for you includes a contact or reservation form — the service that delivers those messages. We keep that list as short as we can and tell you which services your own website depends on.

Your website's visitors

When we build a website for you, you are responsible for the personal information your visitors submit to it, and we will tell you plainly where that information goes. Where a form delivers straight to your own inbox, Merritt Digital never holds it.

How long we keep it

Enquiries that do not become work are deleted within 12 months. Client records are kept while we work together and afterwards only as long as tax and accounting rules require.

Your rights

You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email us and we will action it within 30 days. If you are in the UK, EU or EEA, you have these rights under the GDPR, including the right to complain to your national data protection authority.

Security

We keep client material on access-controlled systems and limit who can reach it. No system is perfectly secure, but we will tell you promptly if anything affecting your information goes wrong.

How to reach us