Legal

Privacy Policy

Last updated: 24 October 2026

Cane Designs is the trading name of Zachary Cane, a sole trader based in London, United Kingdom (“I”, “me”). I am the data controller for personal data collected through this website and in the course of providing web design and maintenance services. This notice explains what I collect, why, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What I collect and why

When you contact me. If you email me, I receive your name, email address and anything you include in your message. I use this to reply to you and, if we work together, to deliver the service. Lawful basis: taking steps at your request before entering into a contract, and performance of that contract.

When we work together. I hold the contact and billing details needed to run your project, invoice you and support your site, plus any content and access credentials you give me for the build. Lawful basis: performance of a contract; legal obligation (accounting records).

When you visit this site. This site is hosted on Cloudflare Pages. Cloudflare processes technical data such as your IP address and browser type to deliver the site securely and may keep short-term logs for security purposes. Lawful basis: legitimate interests (running a secure website).

2. Cookies and tracking

This website does not set any analytics, advertising or tracking cookies and does not run any third-party analytics scripts. The thank-you page embeds a Tally form and a Cal.com booking calendar; these set only the functional cookies they need to work.

Fonts are loaded from Google Fonts. When they load, your browser sends your IP address to Google in order to fetch the font files. Google states it does not use this to track or profile users; you can read its Google Fonts privacy notice for details.

3. Who I share data with

I do not sell personal data. I only share it with service providers I need to run the business, each bound by their own data protection terms:

Cloudflare — website hosting and security
Google — email and font delivery
Stripe — payment processing for invoices (I never see or store your full card details)
MailerLite — email newsletters, only if you have opted in
Tally — the project brief form you complete after booking or paying
Cal.com — call booking; it collects your name, email and chosen time
Accountancy and professional advisers where required by law

Some of these providers process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Agreement, UK adequacy regulations or the provider's equivalent safeguards.

4. How long I keep it

Enquiries that do not lead to work: up to 12 months, then deleted.
Client project files and correspondence: for the life of the engagement and up to 2 years afterwards, so I can support you.
Invoices and financial records: 6 years, as required by HMRC.
Access credentials you share with me: deleted or returned at the end of the project unless you keep me on a maintenance plan.

5. Your rights

You have the right to access the personal data I hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. You can also withdraw consent at any time where consent is the basis for processing. To exercise any of these rights, email info@zacharycane.com. I will respond within one month.

If you are unhappy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

6. Security

Sites I build are served over HTTPS. Client credentials are stored in an encrypted password manager and never sent over plain email where it can be avoided. Access is limited to me.

7. Changes to this notice

I may update this notice from time to time. The date at the top shows when it was last changed.

8. Contact

Zachary Cane, trading as Cane Designs
London, United Kingdom
info@zacharycane.com