How we handle your data.

01Who we are

This website (deighta.app) is operated by Clemfield Digital, a UK-registered business. Deighta is a product built and operated by Clemfield Digital.

For all data-protection matters, Clemfield Digital acts as the data controller for the personal data collected through this website.

You can reach us at hello@deighta.app.

02What data we collect

We collect personal data in two ways:

When you fill in our contact form

• Your name
• Your role or job title
• The institution or organisation you represent
• Your work email address
• Any message you choose to write
• The date and time you submitted the form

When you visit this website

• Standard server logs including your IP address, browser type, and the pages you viewed. These are collected by our hosting provider (Netlify) for security and performance purposes.
• If we add privacy-respecting analytics in future (such as Plausible or Fathom), we will update this notice. We do not currently use cookies for tracking or advertising.

03Why we collect it

We only use the personal data you submit to respond to your enquiry. Specifically:

• To email you back and arrange a discovery call
• To understand who is interested in Deighta and what they need
• To keep a record of our conversation in case you come back to us later

We do not use your data for marketing, automated profiling, or any form of advertising. We do not sell or share your data with third parties, except the service providers listed below who are strictly processing data on our behalf.

04Legal basis

Under UK GDPR, we need a lawful basis to process your personal data. For enquiries submitted through our contact form, our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): specifically, responding to business enquiries you have voluntarily initiated.

You can object to this processing at any time by emailing us. If you do, we will stop processing your data and delete it unless we have another legal basis to retain it.

05Who else sees your data

To run this website and respond to enquiries, we use a small number of service providers. They each process data on our instructions and do not use your data for their own purposes.

Netlify (hosting and forms)

Netlify hosts this website and receives your form submissions. Netlify stores form data in their secure infrastructure and forwards it to us by email. Netlify's privacy policy: netlify.com/privacy.

Cloudflare (domain and email routing)

Cloudflare manages our domain and, initially, routes email sent to our addresses. Cloudflare's privacy policy: cloudflare.com/privacypolicy.

Our email provider

Your emails are received and stored in our business email inbox. We will keep this privacy notice up to date as our infrastructure changes.

06Where your data is stored

Where possible, your personal data is stored within the UK or the European Economic Area (EEA). Some of our service providers (such as Netlify and Cloudflare) may process data in other jurisdictions including the United States. Where this happens, they have committed to contractual safeguards (such as the UK International Data Transfer Agreement or equivalent Standard Contractual Clauses) that protect your data under UK GDPR.

07How long we keep it

We retain personal data submitted through our contact form for as long as it is reasonably useful for our business relationship, and in any case no longer than 24 months from your last contact with us, unless you ask us to delete it sooner.

Server logs from our hosting provider are retained according to their standard retention periods, typically 30 to 90 days.

08Your rights

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you
• Rectify any inaccurate or incomplete data
• Erase your data ("right to be forgotten") in certain circumstances
• Restrict or object to our processing of your data
• Port your data to another provider in a structured, machine-readable format
• Withdraw consent at any time (where we are processing based on consent)

To exercise any of these rights, email us at hello@deighta.app. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator: ico.org.uk.

09A note on student data

This privacy notice covers only the data we collect through our marketing website. When Deighta is used by an institution as part of a paid engagement, the institution remains the data controller for all student data, and Clemfield Digital acts as a data processor under a separate data-processing agreement. Those arrangements are documented separately during client onboarding and are not covered by this notice.

10Changes to this notice

We may update this privacy notice from time to time. Any changes will be reflected in the "Last updated" date at the top of this page. Material changes will be flagged to anyone who has previously contacted us.