LEGAL INFORMATION

Privacy policy

Last updated: 10 November 2026

This policy explains what personal information is collected through danmann.co.uk, why it is used and what rights you have. It covers website visitors, people who make enquiries and customers of my web development, SEO and related services.

I keep things straightforward: I only ask for information that is relevant to an enquiry, a working relationship or the safe operation of this website.

Who is responsible for your information?

The data controller for this website is Mann Online Ltd, operating under the Dan Mann name.

Contact: Dan Mann
Business address: 9 Winceby Close, Norwich, Norfolk, NR7 0NS, United Kingdom
Email: hello@danmann.co.uk

If you have a question about this policy or how your personal information is handled, email me at the address above.

What information do I collect?

The information depends on how you use the website or work with me. It may include:

Enquiry details: your name, email address, company or website address, and whatever you write in a contact form or email.
Project information: contact details, correspondence, briefs, files and information necessary to provide agreed services.
Business and billing details: information needed for contracts, invoicing, payments and bookkeeping.
Technical information: IP address, browser and device information, pages requested, approximate visit times, server logs and information recorded to prevent spam or misuse.
Cookie choices: where applicable, preferences associated with cookies or similar technologies.

Most personal information comes directly from you. Technical information is generated when you use the site. In some business relationships, relevant professional contact details may also come from referrals or publicly available business sources.

Please do not send passwords, API keys, payment card details or customer databases through the public enquiry form.

Why do I use it?

UK data protection law requires a lawful basis for handling personal information. Depending on the circumstances, I use information to:

Respond to enquiries and discuss proposed work: taking steps before entering a contract, or legitimate interests in responding to business enquiries.
Deliver agreed services and communicate about projects: performance of a contract, or legitimate interests where the contact is acting for a business customer.
Manage invoices, accounts and legal records: compliance with legal obligations and, where relevant, legitimate interests in running the business.
Protect the website and prevent spam, fraud or misuse: legitimate interests in maintaining a secure, functioning website.
Use optional analytics, marketing or other non-essential tracking: consent where required by the rules on cookies and similar technologies.

Where I rely on legitimate interests, those interests are running the business, communicating with relevant contacts, protecting systems and improving the service without overriding people’s rights.

Contact forms and emails

When you contact me, I use the information you provide to read your message, reply and, if appropriate, prepare a quote or discuss a project. Form submissions may be handled by the website’s form software, email systems and spam-prevention tools. Security checks may process technical details to detect automated or abusive submissions.

Submitting an enquiry does not automatically subscribe you to marketing emails. If I send marketing communications, I will do so only where permitted by law, and you can opt out at any time.

Cookies and similar technologies

Cookies are small files stored on your device. This WordPress website may use cookies needed for administration, logins, security or other essential functions. Third-party features, analytics or embedded content can also involve cookies or similar technologies.

I will only activate non-essential cookies or tracking after obtaining consent where the law requires it. If those features are used, the website’s cookie controls should explain them and let you change your preferences. You can also manage or remove cookies through your browser settings. Blocking essential cookies may affect certain website features.

Website security and logs

Like most websites, the server and security tools may record technical requests, IP addresses, failed login attempts and unusual activity. This information is used to investigate faults, protect the website and identify spam or attempted abuse. Access is limited to people or service providers who need it for those purposes.

Who might receive your information?

Information is shared only where reasonably necessary for the purposes described in this policy. This may include:

Website hosting, domain, backup, maintenance and security providers.
Email, contact-form and anti-spam service providers.
Accounting, invoicing, payment and other business software providers, where relevant.
Professional advisers or public authorities where disclosure is legally required.

I do not sell personal information. I expect service providers to handle information for agreed purposes with appropriate contractual and security safeguards.

International data transfers

Some technology suppliers may store or access personal information outside the UK. Where a transfer is restricted under UK data protection law, it must be supported by a recognised transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards. You can email me for information about safeguards relevant to your data.

How long is information kept?

I keep personal information only for as long as necessary for the purpose for which it was collected, including relevant legal and accounting requirements. As a general guide:

Enquiries that do not lead to work: generally up to 24 months after the last meaningful contact, unless a longer period is needed for a specific reason.
Client correspondence and project records: for the working relationship and an appropriate period afterwards to manage queries or potential disputes.
Financial and accounting records: generally six years, or longer where a legal requirement applies.
Security and technical logs: for the period necessary to maintain security, diagnose problems or investigate incidents, subject to relevant provider retention settings.

Information is deleted, anonymised or securely archived when it is no longer required. Specific retention periods may differ where a legal obligation or ongoing dispute applies.

Working on client websites

Some projects involve access to a client’s website, systems or customer information. Where I process that information on a client’s behalf, the client’s own privacy notice and instructions will generally govern how the information is used. Appropriate confidentiality, access and data-processing arrangements should apply to that work.

External links and embedded content

Pages may link to other websites or display content supplied by third parties, such as videos. Those services may collect information or use cookies under their own privacy policies. I am not responsible for the privacy practices of unrelated websites.

Your data protection rights

Depending on the circumstances, you may have the right to:

Request access to personal information held about you.
Ask for inaccurate information to be corrected.
Request deletion or restriction of the use of your information.
Object to processing based on legitimate interests.
Request transfer of certain information to you or another provider.
Withdraw consent where processing relies on consent.

You can object to the use of your personal information for direct marketing at any time. Rights are not absolute in every situation, particularly where records must be retained by law.

To make a request, email hello@danmann.co.uk. I may need to verify your identity before disclosing or changing personal information.

Complaints

If you believe your information has been handled incorrectly, email hello@danmann.co.uk with the subject “Data protection complaint”. I will acknowledge a complaint within 30 days, look into it and respond without undue delay.

You can also raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Changes to this policy

I may update this policy if the website, services or legal requirements change. The date at the top shows when it was last revised.