Privacy & cookie policy
Last updated 18 September 2026.
Who we are
420 Web Design is a trading name of dijitul, a digital agency based in Nottingham, United Kingdom. We are the data controller for personal data collected through this website. Contact: [email protected], 01623 272 050.
What we collect and why
Enquiry and free review forms
When you submit a form we collect the details you enter (name, company, email, phone, website address, industry and your message) together with the page you submitted it from and your IP address (for spam prevention). We use this to respond to your enquiry, carry out the review you requested and, if you become a client, to deliver our services. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries. Enquiry data is retained for up to 24 months unless you become a client, in which case it is kept for the duration of our relationship and for six years afterwards for accounting and legal purposes.
Form notifications are delivered to our team by SMTP2GO, an email delivery provider with EU data processing. Your details are not used for marketing unless you ask us to keep in touch.
Analytics
With your consent, we use Google Analytics 4 to understand how visitors use the site (pages viewed, approximate location, device type). IP addresses are anonymised. Google Analytics cookies are only set after you accept on the consent banner; if you reject, no analytics cookies are set. You can change your choice at any time by clearing this site’s data in your browser.
Cookies
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| PHPSESSID | Prevents form spam and repeat submissions | Strictly necessary | Session |
| consent (local storage) | Remembers your cookie choice | Strictly necessary | Until cleared |
| _ga, _ga_* | Google Analytics — distinguishes visitors and sessions | Analytics (consent required) | Up to 2 years |
Who we share data with
Our hosting provider (UK data centre), SMTP2GO (email delivery) and Google (analytics, if consented). We do not sell personal data. We may disclose data where required by law.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and complain to the Information Commissioner’s Office (ico.org.uk). Email [email protected] and we will respond within one month.
Security
The site is served over HTTPS. Form submissions are stored outside the public web directory on access-controlled servers. Credentials are never stored in the website code.
Changes
We will update this page when our practices change and revise the date at the top.