Skip to main content

Privacy Policy

Last updated: 9 May 2026

This Privacy Policy explains how Digitotum (“we”, “us”, “our”) collects, uses and protects personal information you provide when you visit digitotum.co.uk or get in touch with us. We are the data controller for the personal data we collect through this site.

Who we are

Digitotum is a UK-based technology consultancy operated by Jed Alder. You can contact us at hello@digitotum.co.uk.

What information we collect

We only collect information that you choose to share with us, or that is collected automatically when you browse the site:

  • Contact form submissions: name, email address, company (optional), and the contents of your message.

  • Email correspondence: any information you include when you email us directly.

  • Technical data: IP address, browser type, device information, pages visited and approximate location, collected via analytics and our hosting platform for security and performance purposes.

  • Cookies: see our Cookie Policy for full details of the cookies set on this site and how to manage your consent.

How we use your information

We use your personal data to:

  • respond to enquiries you submit through the contact form or by email;

  • provide the services you have engaged us to deliver;

  • maintain the security, performance and reliability of the website;

  • comply with our legal and regulatory obligations.

Lawful basis

We rely on the following lawful bases under the UK GDPR:

  • Legitimate interests — to respond to your enquiry and to operate and secure the website;

  • Consent — for non-essential cookies and any marketing communications, which you can withdraw at any time;

  • Contract — where we are providing services to you or your organisation;

  • Legal obligation — where we are required to retain records (for example, for tax purposes).

Who we share your information with

We do not sell your personal data. We share it only with trusted service providers who help us run the business, including:

  • Microsoft Azure (website and email hosting, EU/UK regions);

  • Microsoft 365;

  • Analytics providers, e.g. Application Insights / Google Analytics;

  • Cookiebot (consent management);

  • Our accountants and other professional advisors where necessary.

These providers act as our data processors and are bound by contract to protect your information.

International transfers

Where personal data is transferred outside the UK or EEA, we rely on adequacy decisions or the UK International Data Transfer Agreement / Addendum to ensure your data remains protected.

How long we keep your data

We keep enquiry data for up to 24 months after our last contact, unless we enter into a working relationship — in which case we retain client records for [7] years to meet HMRC and contractual requirements. Server logs are retained for up to 90 days.

Your rights

Under the UK GDPR you have the right to:

  • access the personal data we hold about you;

  • request that we correct inaccurate or incomplete data;

  • request that we erase your data, where applicable;

  • object to or restrict our processing of your data;

  • request data portability;

  • withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email dpo@digitotum.co.uk. We will respond within one calendar month.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure, including encryption in transit (HTTPS) and access controls on our systems.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will reflect the most recent revision.

Contact us

For any questions about this Privacy Policy or our data practices, contact us at dpo@digitotum.co.uk.