Legal
Privacy Policy
Your privacy matters, a lot. This Privacy Policy explains what data we collect, why we collect it, and how we keep it safe. It also tells you what rights you have under the General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Who We Are
This website is owned and operated by Digerati, a freelance web developer based in Guernsey. If you have questions about how your data is used, you can contact us at:
Email: cabal@digerati.design
2. What Data We Collect and Why
We only collect what we need to make this site work and respond to your inquiries.
3. How We Use Your Data
We only use your data for:
- Responding to your messages
- Securing the website
- Improving site performance and usability
- Complying with legal obligations
We do not sell or rent your data. Ever.
4. Cookies and Tracking
This website may use cookies or similar technologies for:
- Essential site functions (e.g., animations, navigation)
- Analytics via Google Analytics 4 (GA4)
- Advertising and remarketing via:
- Facebook Pixel
- LinkedIn Insight Tag
- Tag management via Google Tag Manager
- Third-party embeds (e.g., YouTube, Vimeo)
We respect your consent. On your first visit, you’ll see a cookie banner where you can accept or reject non-essential cookies.
You can update your preferences at any time or disable cookies in your browser settings.
5. Webflow Hosting and International Data Transfers
This site is built and hosted using Webflow, a U.S.-based platform. That means your data may be transferred to and processed on servers located in the United States.
To protect your data, Webflow relies on:
- EU–U.S. Data Privacy Framework
- Standard Contractual Clauses (SCCs) in their Data Processing Addendum
- UK and Swiss transfer mechanisms for those regions
These tools ensure that your data is handled in accordance with the GDPR.
6. Your Rights Under GDPR
If you're located in the EU, UK, or other regions with similar privacy laws, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise any of these rights, email cabal@digerati.design and we’ll respond within 30 days.
6.1 California Privacy Rights (CCPA/CPRA)
Although this website is based in the Bailiwick of Guernsey and primarily serves UK and EU visitors, we respect the privacy rights of individuals from other regions, including California.
If you're a resident of California, you may request:
- Access to the personal data we hold about you
- Deletion of your personal information
- Information about how we collect, use, or disclose your data
We do not sell or share personal information for commercial purposes.
To make a request, email cabal@digerati.design with “CCPA Request” in the subject line. We’ll respond within 30 days.
6.2 CCPA Accessibility Requirements
In accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), this Privacy Policy is intended to be reasonably accessible to users with disabilities. We follow recognised accessibility standards, including WCAG 2.1 AA, to ensure that this page is compatible with screen readers, keyboard navigation, and alternative input methods.
If you are a California resident and require this policy in an alternative format, please contact us at cabal@digerati.design, and we will provide a suitable version upon request.
7. Third-Party Services
Some external services may collect data when embedded on this site or when you opt in via cookies. These may include:
- Google Analytics 4 for understanding site performance
- Google Tag Manager for loading analytics and tracking scripts
- Facebook Pixel for marketing attribution and retargeting
- LinkedIn Insight Tag for ad performance and audience insights
- YouTube or Vimeo for embedded videos
- Tally.so for collecting form submissions (data is sent securely to our inbox)
We only use third parties that are GDPR-compliant and where necessary, have Data Processing Agreements (DPAs) in place.
- Tally data is processed on servers in the EU, and they provide a DPA, available here.
- You can find a list of Tally's subprocessors and their Privacy Policy for more information.
- Form submissions are retained for up to 12 months, or sooner if deleted upon request.
7.1 Data Processing Agreements (DPAs)
If you are a client commissioning a website from Digerati, you are considered the data controller for your project. We act as the data processor when handling any personal data on your behalf, for example, during form setup, analytics integration, or deployment.
To formalise this relationship and ensure full GDPR compliance, we are happy to sign a Data Processing Agreement (DPA) with you upon request.
We also strongly recommend that any client who owns their own Webflow project signs Webflow’s Data Processing Agreement. This ensures that personal data processed by Webflow (such as form submissions or hosting data) is covered under an appropriate legal framework, including Standard Contractual Clauses (SCCs).
8. Data Retention
We only keep your personal data as long as necessary to fulfill its purpose — typically until:
- You ask us to delete it
- It's no longer needed
- We’re required by law to keep it
9. Security
We take reasonable measures to protect your data from loss, misuse, and unauthorized access. This includes encryption, HTTPS, and secure third-party services.
10. Changes to This Policy
We may update this Privacy Policy occasionally. If it’s a big change, we’ll notify you on the site. The most recent version is always the one you’re reading right now.
11. Questions?
If you have any concerns about your data or how we handle privacy, get in touch:
Email: cabal@digerati.design