Privacy policy.

Gray Gecko is the trading name of Marc Norris, a sole trader based in Pucklechurch, South Gloucestershire. I am the controller of the personal data described here, which means I decide how and why it is used.

You can contact me about your data at hello@graygecko.co.uk.

• Contact form: your email address, the subject and your message, plus anything you choose to include in it. The form also sends you an automatic acknowledgement email.
• Price builder: the estimate you build is held in your browser only, and is passed to the contact form if you choose “Get a fixed quote”. It is cleared once used.
• Clients: your name, business name, contact and billing details, and the content you give me for your site.
• Analytics, only if you accept cookies: pages visited, device and browser type, approximate location and how you arrived, collected by Google Analytics.
• Technical data: your IP address and browser details appear in the hosting provider’s server logs. The contact form also uses your IP address briefly to limit spam.

I do not ask for payment card details on this site, and I do not knowingly collect data from children.

• To reply to your enquiry and give you a quote. The legal basis is taking steps at your request before a contract, and my legitimate interest in running my business.
• To build, host and support your website, and to invoice you. The legal basis is performing our contract.
• To keep accounting and tax records. The legal basis is a legal obligation.
• To keep the site secure and prevent spam. The legal basis is my legitimate interest.
• To measure how the site is used. The legal basis is your consent, which you can withdraw at any time.

I do not sell your data, and I do not use it for automated decision-making or profiling.

I use a small number of service providers, who process data on my behalf:

• Vercel, which hosts this website.
• Resend, which delivers the contact form email and the automatic reply.
• AI tools I use to help design and build client sites, which may process content you send me for that purpose.
• Google Analytics, only if you accept analytics cookies.
• My own email and accounting tools, for client communication and invoicing.

I may also share data where the law requires it, for example with HMRC. Some of these providers are based in the United States. Where data is transferred outside the UK, I rely on the safeguards those providers offer, such as the UK data bridge or standard contractual clauses.

• Enquiries that do not become work: up to 24 months after our last message, then deleted.
• Client records and invoices: 6 years after the end of the tax year, as accounting law requires.
• Site content you gave me: while I host your site, and for a short period after handover or cancellation, so that nothing is lost.
• Analytics data: according to Google Analytics retention settings, which I keep short.

Under UK data protection law you can ask me to:

• give you a copy of the personal data I hold about you
• correct data that is wrong or incomplete
• delete your data, where there is no good reason for me to keep it
• restrict how I use it, or object to my use of it
• give you your data in a portable format
• stop using it where I rely on your consent

Email hello@graygecko.co.uk and I will reply within one month. If you are unhappy with how I have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. I would appreciate the chance to put things right first.

Analytics cookies are only set if you accept them in the banner. You can change your choice at any time from “Cookie preferences” in the footer. The cookie policy lists exactly what is used.

The site is served over HTTPS, access to the contact inbox is protected, and I only keep what I need. No online service is completely secure, so if you are sending anything sensitive, please tell me first and we can agree a safer way to share it.

If I change this policy I will update the date at the top of this page. For significant changes that affect clients, I will let you know by email.