Halden Digital
Menu

Privacy notice

Last updated: 12 October 2026

This notice explains how Halden Digital uses personal information. It covers the businesses we contact about our website services, our clients, and anyone who emails us or visits our website.

Who we are

Halden Digital is the trading name of Yamin Ahmed, a sole trader. We build and look after websites for small businesses in the UK.

We are the controller of the personal information described here. Please use the email address above for any question about this notice.

What information we use and where it comes from

Businesses we may contact. We look for businesses that might benefit from a new or better website. We record business information only:

  • company and trading name, company number, company type, business activity codes, incorporation date, registered-office postcode and town;
  • website address, and our own assessment of the website;
  • general business contact routes, such as an info@ or enquiries@ address, a contact form, or a business social media page.

This comes from Companies House, OpenStreetMap and the business’s own website.

We only contact limited companies, limited liability partnerships and Scottish partnerships. We do not collect directors’ or employees’ names, personal email addresses or mobile numbers for this purpose. If a business email address happens to identify a person, we treat it with the same care as personal information.

People who reply to us or email us. We keep your message, your name, your contact details and anything else you choose to send, so that we can respond.

Clients. We keep contact details, agreements, invoices, approvals and records of the work we do for you. We also keep the content you give us for your website.

Visitors to our website. Our website uses no tracking cookies and no analytics. Our hosting provider processes basic technical information, such as IP addresses, to deliver and protect the site.

Why we use it and our lawful basis

  • Offering our services to businesses (finding suitable businesses, preparing a sample website, and sending one email about it). Our lawful basis is legitimate interests: promoting our business to other businesses that are likely to benefit.
    • We have weighed this against your interests. We use business information only. We contact each business by an individually approved email. We include a way to opt out in every message, and we keep to strict deletion periods.
    • You can ask us for a copy of our legitimate interests assessment.
  • Replying to you and dealing with enquiries. Legitimate interests (running our business and answering you). If you ask for a quote, we take steps at your request before entering into a contract.
  • Providing our services to clients. Performance of a contract, and our legal obligations (for example, keeping accounting records).
  • Keeping a record of opt-outs. Our legal obligation to respect your objection, and our legitimate interest in never contacting you again.

Who we share it with

We use service providers that process information for us or alongside us:

  • Website hosting and DNS: Cloudflare (our website, sample websites and client websites).
  • Email: Zoho (our mailbox).
  • Website contact forms: Web3Forms (forms on client websites, where used).
  • Payments: Stripe (client invoices and payments).
  • AI service providers. We use them to help with our work, for example to review public website content and to help draft replies.
    • We remove names, contact details and email signatures before any reply text is shared with them.
    • We have switched off their use of our content for training.
    • These providers are based in the United States.
  • Code hosting: GitHub. This holds our own software only, and no personal information.

We do not sell personal information, and we do not share it for anyone else’s marketing.

International transfers

Some of these providers process information outside the UK, including in the United States and India. Where they do, the transfer relies on UK adequacy regulations (including the UK–US data bridge) or on the International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for details of the safeguard for a particular provider.

How long we keep it

  • Businesses we found but never contacted: deleted 90 days after we collected the information.
  • Businesses we contacted that did not become clients: our research, sample website, messages and replies are deleted 12 months after our last contact.
  • Clients: agreements, invoices, approvals and work records are kept for 6 years after our relationship ends, for legal and accounting reasons. Your website source files are deleted 90 days after the relationship ends, once you have been given a copy. Copies made for handover are deleted 30 days after handover.
  • Opt-out records: kept for as long as we operate, holding only what we need to make sure we never contact you again.
  • Backups: encrypted backups follow these periods on a rolling basis: 14 daily local copies and 8 weekly off-site copies.

Your rights

You have the right to:

  • object to direct marketing at any time. This right is absolute. Reply “unsubscribe” to any message from us, or email hello@haldendigital.co.uk, and we will stop straight away and add you to our do-not-contact list;
  • object to other processing based on legitimate interests;
  • ask for a copy of your personal information (including the names of the providers we share it with);
  • ask us to correct or delete it, or to restrict how we use it;
  • ask for information you gave us to be transferred to you or someone else, where this applies.

To use any of these rights, email hello@haldendigital.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: https://ico.org.uk/make-a-complaint/ or 0303 123 1113.