D Rosa Digital
Start a project
Legal

Privacy Policy

This explains what personal information D Rosa Digital collects, why we collect it, who we share it with, and what you can ask us to do about it.

Last updated: 12 October 2026

Who we are

D Rosa Digital is a web design and development studio based in the United Kingdom. It is the trading name of J. De La Rosa, a sole trader. For the purposes of UK data protection law, J. De La Rosa (trading as D Rosa Digital) is the data controller for the personal information described in this policy.

What we collect

Information you give us

When you fill in an enquiry or quote form on this website, or email, call or message us on WhatsApp, we collect:

  • Your name and business name
  • Your email address, and your phone number if you give one
  • Your current website address, if you give one
  • Anything you choose to write in the message field

Information collected automatically

  • Server logs. Our hosting provider records standard technical information for every visit — IP address, browser type, pages requested, and the date and time. This is used to keep the site running securely and is not used to identify you personally.
  • Advertising and analytics. This site uses Google Analytics and Google Ads to measure how the site is used and whether an advert led to an enquiry. They only set cookies if you accept them in the cookie banner. If you reject them, or haven't chosen yet, no analytics or advertising cookies are set; Google may still receive basic signals without cookies — for example, that a page was viewed — which it uses to estimate traffic and advert results without identifying you. Where you reach us by clicking a Google advert, the advert click identifier (gclid) is passed along with your enquiry so we can tell which campaign it came from.
  • Chat assistant. If you use the chat assistant on our site, the messages you type are sent to Google's Gemini API to generate a reply. Please don't type anything confidential into it.

Why we use it, and our lawful basis

  • To reply to your enquiry and prepare a quote or proposal — because it is necessary to take steps at your request before entering into a contract.
  • To deliver work you've asked us to do — because it is necessary to perform our contract with you.
  • To keep the website secure and working — on the basis of our legitimate interests in running a safe, functioning service.
  • To measure our advertising and improve the site — on the basis of your consent, where consent is required for the cookies involved.
  • To meet accounting and legal obligations — because we are required to by law.

We do not sell your personal information, and we do not use it to send marketing you haven't asked for.

Who we share it with

We use a small number of third-party services to run this business. Each only receives what it needs to do its job:

  • Formspree — processes website form submissions and delivers them to our inbox.
  • Hostinger — hosts this website and its server logs.
  • Google — Analytics and Ads measurement, and the Gemini API that powers the chat assistant.
  • Our email provider — stores the correspondence between us.
  • WhatsApp (Meta) — if you choose to message us on WhatsApp, your messages are handled by WhatsApp under its own terms.

Some of these providers are based outside the UK, including in the United States. Where personal data is transferred outside the UK, it is protected by an appropriate safeguard recognised under UK data protection law, such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision.

We may also disclose information where we are legally required to do so.

How long we keep it

  • Enquiries that don't become work: up to 24 months, then deleted.
  • Client records: for the duration of the project and for 6 years afterwards, to meet UK accounting and tax requirements.
  • Server logs: as retained by our hosting provider, typically a matter of weeks.
  • Analytics and advertising data: as set by the retention period configured in the relevant Google product.

Cookies

This site only sets analytics and advertising cookies (from Google Analytics and Google Ads) if you accept them in the cookie banner that appears on your first visit. Until you choose, they stay off.

You can change your mind at any time with the "Cookie settings" link at the bottom of every page, or block and delete cookies in your browser settings. Rejecting cookies won't stop you using the site or sending us an enquiry.

Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal information we hold about you
  • Have inaccurate information corrected
  • Ask us to delete your information, where there's no good reason for us to keep it
  • Object to, or ask us to restrict, how we use it
  • Ask us to transfer it to you or another provider in a portable format
  • Withdraw consent at any time, where we relied on consent

To exercise any of these, email contact@drosadigital.com. We'll respond within one month. There's no charge.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we handle personal information, we'll update this page and change the date at the top. If the change is significant, we'll tell affected clients directly.

Contact us

Any question about this policy or your information: contact@drosadigital.com or 0203 7583809.