Privacy Policy

Last updated: 18 August 2026

This privacy policy explains how Dysgraphic collects, uses and protects personal information when you visit this website, contact me or purchase a service.

1. Who is responsible for your information?

Dysgraphic is operated by:

Name: Marc Atkins
Email: hello@dysgraphic.co.uk
Website: https://dysgraphic.co.uk

For data-protection purposes, I am the data controller for the personal information described in this policy.

In this policy, “Dysgraphic”, “I”, “me” and “my” refer to the person operating Dysgraphic.

2. Information I may collect

Information you provide

This may include:

  • Your name
  • Your business or organisation name
  • Your email address
  • Your telephone number
  • Information submitted through the contact form
  • Details about your website or the service you require
  • Billing and payment information
  • Messages, feedback and other correspondence
  • Information contained in files or documents you send
  • Website login details or temporary access credentials
  • Information required to provide a website health check or website-fix service

Please avoid sending personal information that is not needed for your enquiry or service.

Information collected automatically

When you visit the website, certain technical information may be collected automatically, including:

  • Your IP address
  • Browser and device type
  • Operating system
  • Pages visited
  • Approximate location
  • Referring website
  • Dates and times of visits
  • Website interactions
  • Cookie and consent preferences

This information may be collected through server logs, cookies and analytics tools.

More information is available in the Dysgraphic Cookie Policy.

Information received from other sources

I may receive personal information from:

  • Payment providers
  • Website hosting providers
  • Analytics services
  • Email providers
  • Businesses that refer you to Dysgraphic
  • Publicly available business websites or directories

3. How I use your information

I may use personal information to:

  • Respond to questions and enquiries
  • Provide quotes
  • Arrange and manage bookings
  • Carry out website health checks
  • Complete website fixes and related services
  • Communicate with you about ongoing work
  • Process payments and issue invoices
  • Provide customer support
  • Maintain business and tax records
  • Protect the security of Dysgraphic and its clients
  • Investigate technical issues, misuse or fraud
  • Improve the website and services
  • Understand how visitors use the website
  • Comply with legal and regulatory obligations
  • Establish, exercise or defend legal claims
  • Send marketing communications where permitted

I will not sell your personal information.

4. Lawful bases for using your information

UK data-protection law requires a valid reason, known as a lawful basis, for using personal information.

Contract

I may use your information when it is necessary to:

  • Provide a quote you have requested
  • Take steps before entering into a contract
  • Deliver a service you have purchased
  • Communicate with you about that service
  • Process payments
  • Meet my obligations under our agreement

Without this information, I may not be able to provide the requested service.

Legitimate interests

I may use personal information where it is necessary for my legitimate business interests and those interests do not unfairly override your rights.

These interests may include:

  • Responding to business enquiries
  • Operating and improving Dysgraphic
  • Maintaining customer and project records
  • Protecting website and account security
  • Preventing fraud or misuse
  • Recovering unpaid fees
  • Understanding general website performance
  • Establishing or defending legal claims

Legal obligation

I may use or retain information when necessary to comply with a legal duty, including:

  • Tax and accounting requirements
  • Responding to lawful requests from authorities
  • Meeting data-protection requirements
  • Preventing or reporting unlawful activity

Consent

I may rely on your consent for certain activities, such as:

  • Sending some marketing emails
  • Placing non-essential cookies
  • Using an optional third-party service that requires consent

You may withdraw your consent at any time. Withdrawing consent does not make earlier use of your information unlawful.

5. Contact forms and enquiries

When you submit the contact form or contact me directly, I may collect your name, contact details and the information contained in your message.

I use this information to respond to your enquiry, discuss your requirements and provide a quote where requested.

The lawful basis will usually be:

  • Taking steps at your request before entering into a contract
  • Performing a contract
  • My legitimate interest in responding to genuine business enquiries

Contact-form submissions may be processed through:

Website hosting provider: Ionos
Email provider: Ionos
Contact-form service or plugin: WPLITE

Do not submit passwords through the general contact form.

6. Client website access

To provide a health check or website-fix service, I may need temporary access to:

  • Your WordPress dashboard
  • Website hosting
  • Domain settings
  • Analytics accounts
  • Search Console
  • Tag-management systems
  • Email or form systems
  • Backup or security tools
  • Other services connected to your website

You should create a separate temporary account wherever possible rather than sharing your main login.

Login details will only be used to provide the agreed service. They will not be shared except where this is necessary to deliver the service and has been agreed with you.

Temporary credentials will be securely deleted when they are no longer needed.

You should remove my access or change any shared passwords after the work has been completed.

7. Information found on client websites

While carrying out website work, I may temporarily have access to personal information stored on your website, such as:

  • Contact-form submissions
  • Customer details
  • User accounts
  • Order information
  • Analytics data
  • Email addresses
  • Website logs

For this information, you will usually remain the data controller and Dysgraphic will act as a data processor working under your instructions.

I will only access this information where reasonably necessary to provide the agreed service.

I will not copy, use or disclose information found on your website for my own purposes.

You are responsible for ensuring that you have a lawful basis for the personal information stored on your website and for providing any required privacy information to your users.

8. Payments

Payments may be processed through:

Payment provider: PayPal, bank transfer

The payment provider may collect information such as:

  • Your name
  • Billing address
  • Email address
  • Payment amount
  • Payment method
  • Transaction details

Dysgraphic does not normally receive or store your complete card details.

Payment providers process information under their own privacy policies and security arrangements.

I may retain invoices, payment confirmations and transaction records for accounting, tax and legal purposes.

9. Analytics

The website may use:

Analytics provider: Google Analytics

Analytics tools may collect information about how visitors find and use the website, including:

  • Pages viewed
  • Time spent on pages
  • Links clicked
  • Referring websites
  • Browser and device information
  • Approximate location
  • IP address or a shortened version of it

Where required, analytics will only be activated after you give consent through the cookie banner.

The information is used to understand website performance and improve the website and services.

You can withdraw or change your cookie preferences using the cookie settings link on the website.

10. Cookies

Cookies are small files placed on your device when you visit a website.

Dysgraphic may use:

  • Strictly necessary cookies
  • Security cookies
  • Preference cookies
  • Analytics cookies
  • Embedded-content cookies

Strictly necessary cookies may be used without consent because the website cannot function properly without them.

Where consent is required, optional cookies will not be placed until you accept them.

You can accept, reject or manage optional cookies through the website’s cookie controls.

Further details are available in the Dysgraphic Cookie Policy.

11. Marketing communications

I will only send marketing communications where I have an appropriate legal basis.

You may unsubscribe at any time by:

  • Using the unsubscribe option in the message
  • Contacting me at hello@dysgraphic.co.uk

Service messages relating to an active booking, payment, security issue or existing contract are not marketing messages.

I will stop using your information for direct marketing if you object.

12. Who I may share information with

I may share personal information with trusted service providers where necessary to operate Dysgraphic or provide your service.

These may include:

  • Website hosting providers
  • Email providers
  • Payment processors
  • Accounting or bookkeeping services
  • Cloud storage providers
  • Analytics providers
  • WordPress, theme and plugin providers
  • Backup and security services
  • Professional advisers
  • Contractors assisting with agreed work

These providers may only use personal information as needed to supply their services or meet their own legal obligations.

I may also disclose information:

  • When required by law
  • In response to a valid legal request
  • To protect my legal rights
  • To investigate fraud or security incidents
  • In connection with the sale or transfer of the business

13. International transfers

Some service providers may process or store personal information outside the United Kingdom.

When information is transferred internationally, I will take reasonable steps to ensure that appropriate safeguards are in place.

These safeguards may include:

  • A UK adequacy regulation
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved standard contractual clauses
  • Another transfer mechanism permitted under UK data-protection law

14. How long information is kept

Personal information will only be kept for as long as reasonably necessary for the purpose for which it was collected.

Unsuccessful enquiries

Enquiries that do not lead to paid work may normally be retained for up to 12 months after the last communication.

Client and project records

Project emails, quotes, reports, approvals and related records may normally be retained for up to six years after the service is completed.

Financial records

Invoices, transaction records and relevant accounting information will normally be retained for at least six years after the end of the relevant financial year, where required for tax and accounting purposes.

Website access details

Temporary passwords and access credentials will be deleted when they are no longer required, normally shortly after the service has been completed.

Website backups

Backups created during website work will normally be deleted within 90 days of completing the service, unless a longer period has been agreed.

Analytics information

Analytics information will be retained according to the settings applied within Google Analytics, currently 2 years.

Marketing information

Marketing contact details may be retained until you unsubscribe, object or the information is no longer needed.

Information may be kept for longer where required by law or where it is needed to establish, exercise or defend a legal claim.

15. How information is protected

I take reasonable technical and organisational measures to protect personal information.

These may include:

  • Strong and unique passwords
  • Multi-factor authentication where available
  • Secure website connections
  • Restricted account access
  • Regular software updates
  • Website security tools
  • Secure backups
  • Password-protected devices
  • Encrypted or secure cloud services
  • Deleting information when it is no longer required

No internet or storage system is completely secure. Although reasonable precautions are taken, absolute security cannot be guaranteed.

16. Personal data breaches

If a personal data breach occurs, I will investigate it and take reasonable steps to reduce the risk of harm.

Where legally required, I will notify the Information Commissioner’s Office and affected individuals.

Clients must tell me promptly if they become aware of a security issue that may affect information I process as part of their service.

17. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for a copy of your personal information
  • Ask for inaccurate information to be corrected
  • Ask for information to be deleted
  • Ask for the use of your information to be restricted
  • Object to certain uses of your information
  • Receive certain information in a portable format
  • Withdraw consent
  • Complain about how your information has been used
  • Ask for information about international-transfer safeguards

These rights are not absolute and may not apply in every situation.

To exercise a right, email hello@dysgraphic.co.uk.

Please explain what you are requesting and provide enough information to identify the relevant records.

I may need to ask for proof of identity before responding.

There is normally no charge for exercising your rights. However, a reasonable fee may be charged, or a request may be refused, where legally permitted because it is clearly unfounded or excessive.

18. Your right to object

You have the right to object to the use of your personal information where the lawful basis is legitimate interests.

I will stop using the information unless there are compelling legitimate grounds to continue or the information is required for legal claims.

You have an absolute right to object to your personal information being used for direct marketing.

To object, email hello@dysgraphic.co.uk.

19. Automated decision-making

Dysgraphic does not currently use personal information to make decisions about individuals solely through automated processing where those decisions have a legal or similarly significant effect.

This policy will be updated if that changes.

20. Children’s information

Dysgraphic’s services are intended for businesses and adults.

I do not knowingly collect personal information directly from children.

Please contact me if you believe a child has provided personal information through this website so that appropriate action can be taken.

21. Links and third-party websites

The Dysgraphic website may contain links to third-party websites.

I am not responsible for the privacy practices, security or content of those websites. You should read their privacy policies before providing personal information.

22. Data-protection complaints

You can complain if you are unhappy with how Dysgraphic has collected, used, stored, shared or protected your personal information.

Send your complaint to:

Email: hello@dysgraphic.co.uk
Subject: Data protection complaint

Please include:

  • Your name and contact details
  • A description of your concern
  • Relevant dates
  • Copies of relevant messages or documents
  • The outcome you would like

I will acknowledge your complaint within 30 days.

I will investigate the complaint appropriately and provide an outcome without undue delay. I will explain any action taken or the reasons for my decision.

You may be contacted if further information is required.

23. Complaining to the ICO

You also have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk

The ICO will usually expect you to raise your concern with Dysgraphic first so that I have an opportunity to investigate it.

24. Changes to this policy

This privacy policy may be updated when:

  • Services change
  • Website tools change
  • Suppliers change
  • Data-protection practices change
  • Legal requirements change

The latest version will be published on this page with an updated revision date.

Significant changes may also be brought to the attention of existing clients where appropriate.

25. Contact

Questions, rights requests and data-protection complaints can be sent to:

Dysgraphic
Marc Atkins
hello@dysgraphic.co.uk
dysgraphic.co.uk