Privacy notice

Who we are

This website is run by Rigstore Limited, a company registered in England and Wales (company number 10207691), whose registered office is 5 Desborough Close, Hertford, England, SG14 3EG. Rigstore Limited is the data controller for the personal data described here.

What we collect

• What you send us. If you use the contact form, we collect your name, your email address and your message. Nothing else on the site asks for personal details.
• Technical data that protects the form. When you send a message, our server uses your IP address to limit how many messages can be sent from one connection (five an hour). For this it keeps only a scrambled (salted and hashed) form of the address, in memory. A short part of that scrambled form is added to our server logs and to the email we receive, as a reference. It can't be turned back into your IP address.
• reCAPTCHA. The contact page uses Google reCAPTCHA Enterprise to tell people from spam bots. It loads only on the contact page, once you start filling in the form. It sends Google information such as your IP address, browser details and how you use the page, and Google returns a score that we check before your message is sent.
• Server logs. Like any website, our hosting provider and the server behind the contact form record requests, including IP addresses, to keep the service running and secure.

The site has no analytics, no advertising and no tracking.

How we use it

We use your details only to read and reply to your enquiry. We don't use them for anything else. We won't add you to a mailing list or send you marketing, and we never sell or share your details.

Where it's kept and for how long

• Your message is sent by email to my inbox (Nick Hughes), using Gmail. It is not saved in a database or kept in any other record on this website. Copies exist only in the Gmail account or accounts used to send and receive it.
• We keep the emails while we deal with your enquiry and any work that follows, and we delete them if you ask us to.
• Logs from the contact form server, including IP addresses, are kept in Google Cloud Logging for 30 days and then deleted automatically.
• The rate-limiting record of your scrambled IP address is held in memory only. It stops counting after an hour and is lost whenever the server restarts.

Our lawful basis

We rely on legitimate interests: when you contact us, we have a legitimate interest in reading and answering the enquiry you started, and in protecting the form from spam and abuse.

Service providers

We use Google to run the site and the form. Firebase Hosting serves the website, Cloud Functions and Cloud Logging run the contact form, and reCAPTCHA Enterprise protects it. Google Cloud processes this data for us under its Cloud Data Processing Addendum. Your message is delivered to, and kept in, Gmail, which Google provides under its own Terms of Service and Privacy Policy.

If you press play on the showreel, the video loads from Vimeo (Vimeo.com, Inc., in the USA). Vimeo then receives your IP address and browser details and handles them under its own privacy policy.

Google may process data outside the UK, including in the United States. Where it does, the transfer is covered by the safeguards in Google's terms, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK-US data bridge. Our contact form function runs in Google's London region (europe-west2). Its logs and the reCAPTCHA check may be processed in other Google locations. Vimeo is based in the USA.

Cookies

We don't use analytics or marketing cookies. Once you start filling in the contact form, reCAPTCHA may set cookies that Google needs for security and to detect abuse. You can read Google's Privacy Policy and Terms of Service.

The showreel is hosted on Vimeo. Nothing loads from Vimeo until you press play. The player is then loaded with Vimeo's "do not track" setting, which stops it setting tracking cookies.

Your rights

Under UK data protection law (UK GDPR) you have the right to:

• ask for a copy of the personal data we hold about you (access)
• ask us to correct it
• ask us to delete it
• ask us to restrict how we use it
• object to how we use it
• ask for it in a portable format

To use any of these rights, send a message through the contact form or write to Rigstore Limited at the registered office above. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Changes to this notice

If we change how we handle personal data, we'll update this page and the "Last updated" date at the top.