LEGAL / YOUR PRIVACY

Privacy policy.

I respect your privacy and collect only the information I need to operate this website, understand how it is used and respond to enquiries.

Last updated: 21 October 2026

01. Who I am

This website is operated by Emma Nicholson (née Emma Dolan), an independent Shopify designer and developer based in Somerset, United Kingdom.

I am the data controller for personal information collected through this website.

Website: www.emma-nicholson.com
Privacy enquiries: contact me using the website enquiry form.

02. Information I collect

When you contact me: I collect the information you provide, including your name, email address, website, project type, indicative budget and project description. I also process our subsequent correspondence.

Please avoid submitting sensitive personal information or passwords through the enquiry form.

When you visit: I use Fathom Analytics to understand overall website usage, including visits, pages viewed and referral sources. Fathom does not use analytics cookies or create advertising profiles across websites.

Technical information: Shopify and other services involved in delivering the website may process information such as IP addresses, browser details and security logs to operate the site and protect it against misuse.

03. Why I use your information

I use personal information to:

• Respond to enquiries and understand project requirements.
• Prepare quotes, proposals and contracts.
• Deliver agreed services and manage client relationships.
• Maintain necessary business and accounting records.
• Operate, secure and improve the website.

Depending on the circumstances, my lawful basis is taking steps at your request before entering into a contract, performing a contract, complying with legal obligations, or pursuing legitimate interests.

My legitimate interests include responding to business enquiries, managing my independent development business, protecting the website and understanding its overall performance. I consider visitors’ privacy when relying on these interests.

Submitting an enquiry does not subscribe you to a marketing mailing list.

04. Contact forms and service providers

The main project enquiry form submits through Shopify’s contact system. I use Gmail to receive and respond to email correspondence. This form does not currently send enquiries to Fillout.

Where a page provides a Fillout form, information entered into that form is also processed by that provider.

Services used in connection with the website include:

• Shopify: website hosting, native contact-form processing and platform security.
• Google / Gmail: email correspondence.
• Fathom Analytics: privacy-focused website statistics.

I do not sell personal information to advertisers or data brokers. Additional project-management or accounting services may be used if we enter into a working relationship.

05. Analytics and cookies

I use Fathom Analytics to understand website usage. Fathom’s visitor analytics does not rely on tracking cookies.

Shopify, embedded forms and security services may use cookies or similar technologies to provide their functionality. Fathom’s cookieless analytics does not mean that every other service on this website is cookie-free.

06. How long I keep information

I retain personal information only for as long as it is reasonably needed for the purposes described in this policy.

• Unsuccessful enquiries: normally up to 12 months after the last meaningful correspondence.
• Essential client and project correspondence: normally up to six years after the project or ongoing support relationship ends.
• Routine messages and duplicate files: deleted sooner when no longer needed.
• Invoices and accounting records: retained for the period required by applicable law.
• Technical and security information: retained according to the relevant provider’s arrangements and the operational or security purpose.

Relevant records may be retained longer where necessary to comply with a legal obligation or establish, exercise or defend a legal claim. Information will be deleted or anonymised when no longer required.

07. International processing

Some service providers may process information outside the United Kingdom. Applicable data-protection requirements must be met where a restricted international transfer takes place.

You can contact me to request further information about the providers and transfer arrangements relevant to your information.

08. Keeping information secure

I take reasonable technical and organisational steps to protect personal information, including using HTTPS connections and limiting access to information to those who need it.

No online service can guarantee absolute security. Please contact me if you have a concern about information you have shared.

09. Your rights

Depending on the circumstances and applicable exemptions, you may have the right to:

• Request access to your personal information.
• Ask for inaccurate information to be corrected.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where the legal conditions apply.
• Withdraw consent where processing relies on consent.

Your right to object: you can object to processing based on legitimate interests. I will consider your request and stop processing where required by law.

To exercise a right, contact me. I may need to verify your identity before acting on your request.

You can also complain directly to the Information Commissioner’s Office, the UK’s data-protection regulator. You do not need to contact me first.

10. Is providing information mandatory?

You do not have to submit an enquiry. However, I need your contact details and enough information about your request to respond. Website and budget fields are optional.

If we work together, further information may be needed to deliver services, issue invoices or meet legal obligations.

11. Automated decisions

I do not use enquiry information to make solely automated decisions that produce legal or similarly significant effects on individuals. Form validation and spam protection may be used to protect the website.

12. Changes to this policy

I may update this policy when the website, service providers or legal requirements change. The latest version will appear on this page with an updated date.

13. Contact

Emma Nicholson (née Emma Dolan)
Somerset, United Kingdom

For privacy questions or requests relating to your personal information, please use the website contact form.