Privacy Policy
Last updated: 12 June 2026
1. Who we are
This website is operated by Joanna Herman, a freelance web developer and designer based in the UK. References to “I”, “me”, or “my” in this policy refer to Joanna Herman as the data controller.
If you have any questions about how your data is handled, you can contact me at: infoo@joannaherman.com
2. What data I collect and why
a. Contact form enquiries
When you submit the contact form on this site, I collect your name, email address, company or organisation (if provided), service interest, and a description of your project. This data is used solely to respond to your enquiry. The legal basis is legitimate interest (responding to a direct request from you) or, where our exchange leads to a contract, the preparation of that contract.
Contact form submissions are processed via Web3Forms (web3forms.com), which acts as a data processor on my behalf. I keep enquiry data for 12 months, after which it is deleted.
b. Growth Review booking form
If you book a Growth Review through this site, I collect your name, email address, website URL, and service selection. Payment is processed by Stripe — I do not store payment card details. The legal basis is the performance of a contract. Data is retained as required by Stripe and applicable financial regulations. You can review Stripe’s privacy policy at stripe.com/privacy.
c. Analytics — Google Analytics 4
With your consent, this site uses Google Analytics 4 to collect anonymised data about how visitors use the site — including pages visited, time on site, device type, and approximate geographic location. This data does not identify you personally. Google Analytics is only loaded if you accept cookies. The legal basis is consent. Data is processed by Google; you can review their privacy policy at policies.google.com/privacy.
3. Cookies
This site uses the following cookies:
cookie_consent— set when you make a choice in the cookie banner. This is a functional cookie that does not require consent to set. It stores your preference (“accepted” or “rejected”) and expires after 365 days.
Google Analytics cookies (_ga, _gid, and related) — set only if you accept cookies. Used to distinguish unique users and sessions. These expire between 24 hours and 2 years depending on the specific cookie.
You can change your cookie preferences at any time by clicking “Cookie preferences” in the footer of this site.
4. Data sharing
I do not sell, rent, or trade personal data. Data may be shared only with the following third-party processors, each of whom is GDPR-compliant and operating under an appropriate data processing agreement: Web3Forms (contact form processing), Stripe (payment processing, for paid services), Google (analytics, only with your consent).
5. Your rights
Under UK GDPR — and, where applicable, EU GDPR and the CCPA — you have the right to access the personal data I hold about you; to have inaccurate data corrected; to request erasure of your data, subject to legal obligations; to restrict or object to processing in certain circumstances; to receive your data in a portable format; and to withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.
To exercise any of these rights, contact me at: info@joannaherman.com. If you are based in the UK and are not satisfied with my response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
6. Data security
I take reasonable technical and organisational measures to protect personal data. All data transmitted to and from this site is encrypted via HTTPS. Access to data is limited to what is necessary to deliver the relevant service. No method of transmission over the internet is entirely secure, and I cannot guarantee absolute security.
7. Changes to this policy
I may update this privacy policy from time to time. The “Last updated” date at the top of this page reflects when the most recent changes were made. Continued use of this site following any changes constitutes acceptance of the updated policy.
8. Contact
For any questions about this privacy policy or how your data is handled, contact me at: info@joannaherman.com.