Privacy Policy

Who we are

ojbuiltit is a UK-based website design and development business.

We are responsible for handling personal information collected through our website and business communications.

For privacy-related enquiries, please contact info@ojbuiltit.co.uk.

Information you provide

When you email us, we receive your email address, your name where provided, the contents of your message and any attachments or other information you choose to share.

Our website enquiry forms request your name, email address and industry, with an optional project description. A hidden field helps identify automated submissions.

When you submit an enquiry form, your details are sent to our AWS enquiry service so we can receive and respond to your request.

Please avoid sending sensitive personal information or unnecessary information about other people.

Why we use your information

We use your information to understand your requirements, respond to enquiries, discuss potential work and manage our correspondence.

• Steps towards a contract: where you personally ask us to take steps necessary before entering into a contract, such as preparing a quotation.
• Legitimate interests: for general enquiries and communications with people representing businesses. Our interest is responding to requests and managing our business relationships.
• Legitimate interests: where necessary to maintain the security and reliability of our website and investigate misuse. Our interest is protecting the website and the people who use it.

When relying on legitimate interests, we must consider your interests, rights and reasonable expectations. Providing information is voluntary, but without sufficient contact details and information about your request, we may be unable to respond or prepare a quotation.

Hosting and service providers

We use AWS Amplify for website hosting and Microsoft 365 for business email. These providers process information as needed to deliver their services, including website requests and email correspondence.

Website enquiries are processed through Amazon API Gateway and AWS Lambda, then passed to Amazon SNS to send an email notification to our business email system in Microsoft 365. The enquiry backend is configured in the AWS London region (eu-west-2).

Technical information

AWS Amplify Hosting access logs record requests to our hosted website and may contain requested URLs and query-string parameters. AWS retains these access logs until the Amplify application is deleted. Please avoid including sensitive personal information in URLs or query-string parameters.

Our enquiry service uses separate API Gateway and Lambda CloudWatch log groups, both configured for seven-day retention. After log events reach their retention period, AWS states that deletion typically takes up to 72 hours and can occasionally take longer. This is not a guarantee that logs are deleted exactly seven days after collection.

Cookies and analytics

We have not installed analytics or advertising trackers in the website code. The website code does not set cookies or use local storage or session storage. The fonts used on our public pages are hosted locally.

We will review this information if we introduce cookies, analytics or similar technologies, and provide any information, choices or consent controls required.

How long we keep information

We retain enquiries that do not become client projects for up to 12 months and may delete them earlier when they are no longer needed. We review enquiry records regularly. Client records and information we must retain to meet legal obligations are handled separately, according to their purpose and any applicable retention requirements.

Information that is no longer needed should be deleted or anonymised. Technical records and copies held within service-provider systems are also subject to the relevant service settings and retention arrangements.

Your data protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

• Access your personal information and receive a copy.
• Have inaccurate or incomplete information corrected.
• Ask for your information to be deleted or its use restricted.
• Object to processing based on legitimate interests.
• Receive certain information in a portable format.

If we rely on consent for any future processing, you can withdraw it without affecting the lawfulness of processing before withdrawal.

To make a request, email info@ojbuiltit.co.uk. We normally respond within one month, subject to any extension or adjustment permitted by law. We may need information to confirm your identity.

Concerns and complaints

Please contact us if you have concerns about how we handle your information. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Visit the ICO's complaints page for guidance.

Policy updates

We may update this policy when our services or information-handling practices change. The latest version will appear on this page with its updated date.