Privacy Policy

Last updated: July 2026 · DKT Digital, St Peter Port, Guernsey GY1 · Controller: Daniel Thomas, [email protected]

1. Who we are

DKT Digital is a business automation consultancy based in St Peter Port, Guernsey (GY1), Channel Islands. We act as the data controller for personal data collected via this website. Our registration with the Office of the Data Protection Authority (ODPA), Guernsey, is in progress. Contact: [email protected].

2. What data we collect

• Name, email address, business name, phone number (submitted via our contact form)
• Technical data: IP address, browser type, pages visited, time on site (via server logs only — no analytics cookies)
• Communications: emails and messages you send us
• Client data: billing information and business details provided during onboarding (processed under contract)

3. Why we collect it (lawful basis)

• Contact form submissions: Legitimate interest (responding to enquiries) / pre-contractual steps
• Client onboarding data: Performance of a contract
• Marketing (newsletter): Consent — you can unsubscribe at any time
• We do not sell your data to third parties

4. How we use your data

• Respond to enquiries within one business day
• Deliver agreed automation services
• Send invoices and service updates
• Send our newsletter if you subscribed (unsubscribe link in every email)

5. Who we share it with

• n8n (self-hosted on our own infrastructure — data does not leave our servers)
• Stripe (payment processing — subject to Stripe's own GDPR-compliant privacy policy)
• GoCardless (payment processing for direct debit — subject to GoCardless's own GDPR-compliant privacy policy; processes payer name, bank details, and payment reference)
• TrueLayer (open banking — used to verify bank transactions for clients who connect their bank feed as part of our GST/tax audit service; subject to TrueLayer's FCA-regulated privacy policy; processes read-only bank transaction data only, with your explicit authorisation)
• Beehiiv (newsletter platform — only your name and email if you subscribed)
• WhatsApp / Meta (where WhatsApp is used as a communication channel as part of an agreed automation — subject to Meta's privacy policy; only used where you or your business have explicitly opted in)
• We use AI tools for internal content drafting only — we never send client personal data to external AI APIs

6. Data retention

• Enquiry data: 12 months from last contact if no contract formed
• Client data: 7 years from end of contract (Guernsey financial record-keeping requirement)
• Newsletter data: until you unsubscribe

7. Your rights (Guernsey DP Law 2017, Part 3)

• Access: request a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion (subject to legal retention requirements)
• Restriction: limit how we process your data
• Objection: object to processing based on legitimate interest
• Portability: receive your data in a portable format

To exercise any right, email [email protected]. We respond within 30 days.

8. Cookies and browser storage

This website uses browser localStorage (not a traditional cookie) to remember that you have acknowledged this notice. We do not run our own analytics, advertising cookies, Google Analytics, or Facebook Pixel.

We do embed third-party tools that may set their own cookies or process your data when you use them: Crisp (live chat), Calendly (appointment booking), Cloudflare Turnstile (bot protection on our contact form — processes your IP address and browser signals to verify you are human; no data is stored by us), and Google Fonts (which may log your IP address when web fonts load). These are provided by their respective companies under their own privacy policies.

9. Security

All data is transmitted over HTTPS. Our n8n instance is self-hosted and not publicly accessible. Sensitive credentials are stored encrypted and never in source files.

10. Complaints

You have the right to complain to the Office of the Data Protection Authority (ODPA): Website odpa.gg · Email [email protected] · Phone +44 (0)1481 742074.

11. Changes

We may update this policy. Material changes will be communicated by email to active clients. Last updated: July 2026.