Privacy and cookies.
What we collect, why we collect it, how long we keep it, and who else sees it. Written to be read rather than to be survived. Last updated 16 August 2026.
We do not use cookies, and we do not track you.
- This website sets no cookies of any kind. There is no analytics, no advertising pixel, and nothing stored in your browser.
- We do not know who you are unless you tell us, by filling in a form or emailing us.
- The visitor counts we keep for client websites are totals per day. They contain no IP address and no device identifier, so they cannot be traced back to a person.
- We do not sell or share personal data for marketing, ever.
That is not a promise we are asking you to take on trust. It decides how the software is built: the counting table stores a client, a date, a type and a number, and there is nowhere in it for a person to be recorded.
Had a letter from us about a website with your business name on it? You did not give us your details, so a different page covers you: how we got your details, and what we do with them.
What we keep when you fill in the assessment.
- What we collect. Whatever you type into the step before the questions — your business name, your name, your email address and your postcode — together with your fifteen answers and the seven scores they produce. Every field is optional and the whole step is skippable.
- If you skip it. We keep your answers and scores with nothing attached to them. There is no name, no address and nothing that identifies you, and there is no way for us to work backwards to you.
- Why we keep it. To send you the report you asked for, to understand which parts businesses in a trade tend to score badly on, and — if you ticked the second box — to send you things occasionally.
- The lawful basis. Your consent, for both the report and anything else. The two are separate boxes because they are separate decisions, neither is ever pre-ticked, and your scores appear on screen whether you tick either or not. A result held back until you agree to something would not be a free choice, so we do not hold it back.
- How long. Until you ask us to delete it, or two years after you last hear from us, whichever comes first.
- Who else sees it. Nobody outside Layer Digital, other than the email provider that carries the message to you. We do not sell it and we do not share it for marketing.
- Stopping it. Reply STOP to anything we send, or email us. Withdrawing consent is recorded against your entry rather than quietly dropping it from a list, so it stays withdrawn.
- Your rights. You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it, and we will do it. If you think we have handled it badly you can complain to the Information Commissioner’s Office at ico.org.uk.
None of this changes the section above: the website still sets no cookies, still runs no analytics, and still does not know who you are until you decide to tell us.
The controller.
Layer Digital Ltd is the data controller for the personal data described on this page. We are a private limited company registered in England and Wales, company number 17195070, with our registered office at 123 Spring Lane, Birmingham, England, B24 9BY.
For anything on this page, including a request to see or delete your data, email hello@layerdigital.uk. A person reads that address; it is not a ticket queue.
Only what you hand us.
If you fill in the website brief form
The Presence form asks for your business name, your name, an email address, a phone number, and details about your business such as what you do, where you are, your opening hours, your services and your prices. We also record which page you arrived from.
- Why: to reply to you, and to build the site you asked for. Without it we cannot do either.
- Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to an enquiry.
- How long: for as long as you are a client, and for two years after the last contact if you do not become one, so we can pick up a conversation you left. Ask us and we will delete it sooner.
If you email us or book a call
We keep the correspondence and whatever you chose to include in it. Calls are booked through Calendly, which collects your name, email and chosen time under its own privacy policy.
If you are a client of ours
We hold the details needed to run the service and bill for it: your business records, the contact details for the account, and a reference from our payment provider. We never see or store your card or bank details, only an opaque reference from the provider that holds them.
If you contact a business whose site we built
Your name, the phone number or email you typed, and your message pass through our system on the way to that business. We are the processor and they are the controller: it is their enquiry, and they decide what happens to it. We keep the message so the owner can see it if the email fails.
There are none, so there is nothing to consent to.
Under the Privacy and Electronic Communications Regulations, a website must ask your permission before storing anything on your device that is not strictly necessary. This site stores nothing at all, so there is no banner to click and nothing to refuse.
Two things are worth naming even though neither sets a cookie. Our fonts are served by Google Fonts, and our site is served through Cloudflare, so both see the network request that fetches the page, including your IP address, as any host would. Neither is used to profile you and neither is used by us for analytics.
If we ever add analytics, this section changes in the same commit and a consent banner arrives with it. A privacy page that quietly stops being true is worse than not having one.
The companies that hold data on our behalf.
We do not sell personal data or share it for marketing. These processors are the only third parties involved in running the service.
- Cloudflare serves this website and routes requests to our application.
- Render hosts our application and database, where form submissions and client records are stored.
- Resend sends our transactional email, such as a notification that you submitted the form.
- Google serves the fonts this site uses, and hosts the Business Profile work we do for clients.
- Calendly handles call bookings, if you choose to book one.
- GoCardless handles Direct Debit for clients. They hold the bank details; we hold only a reference.
What you can ask us to do.
- See a copy of the personal data we hold about you.
- Have it corrected if it is wrong.
- Have it deleted, unless we are required to keep it for accounting or legal reasons.
- Object to us using it, or ask us to restrict how we use it.
- Receive it in a portable format.
Email hello@layerdigital.uk and we will respond within one month. If you are not satisfied with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you raised it with us first, but you do not have to.
Anything here you want to ask about?
Email us and a person will answer. There is no form for this one.
hello@layerdigital.uk