Privacy Policy
Last updated 3 August 2026
This policy explains what personal data cmd — Camm Design collects, why, and what you can do about it. It is written to be read, not to be skimmed past.
The short version. This website has no contact form, no analytics, no advertising and no tracking cookies. We only hold personal data about you if you choose to contact us, or if you become a client.
1. Who is responsible for your data
- Data controller
- Ethan Camm, trading as cmd — Camm Design
- Country
- United Kingdom
- Contact
- hello@camm.design
There is no separate data protection officer; data protection queries go to the contact address above.
2. What this website itself collects
No contact form. This site does not have one. The buttons on it open your own email client or WhatsApp — nothing is submitted to us through the page.
No analytics or advertising. We do not use Google Analytics, advertising pixels, or any third-party tracking.
No cookies set by us. The site stores one small preference in your browser's local storage if you turn on the colour filter, so it is remembered next visit. It stays on your device, is not a cookie, is not sent to us, and contains nothing that identifies you. Clearing your browser data removes it.
Third parties your browser contacts
Loading this page makes requests to three external services. None of them are tracking you on our behalf, but each necessarily sees your IP address:
- GitHub Pages hosts this site. GitHub records server log data, including IP addresses, for security and to serve the site. See the GitHub Privacy Statement.
- Google Fonts serves the typefaces. See Google's Privacy Policy.
- Cloudflare (cdnjs) serves the 3D graphics library used by the animation on the home page. See Cloudflare's Privacy Policy.
We do not have access to identifiable data from any of them, beyond what any site owner sees.
3. What we collect when you get in touch
If you email, WhatsApp or call us, we hold whatever you send: your name, email address, phone number, business details and the content of your messages.
- Email is hosted on our email provider's servers.
- WhatsApp messages are handled by WhatsApp Ireland Limited under its own privacy policy. Message content is end-to-end encrypted; WhatsApp still processes metadata such as phone numbers and timestamps.
Lawful basis: legitimate interests — responding to an enquiry you chose to send us. Where you go on to become a client, the basis becomes performance of a contract.
4. What we collect if you become a client
- Contact and business details, and billing details.
- Project material you send us: copy, images, account access.
- Invoices and payment records.
Lawful basis: performance of a contract, and legal obligation for accounting records.
Where a website we design includes online payments, the Stripe merchant account is yours, not ours. Your customers' card details go straight to Stripe. We never see, handle or store card data, and we are not the controller for your customers' payment data.
5. Who we share it with
We do not sell your data, and we do not share it for marketing. We share it only with the suppliers needed to do the work:
- Our email and file storage providers.
- Hosting providers, where a project requires it.
- Our accountant and HMRC, for tax and accounting.
- Anyone we are legally required to disclose to.
Some suppliers are outside the UK. Where they are, transfers rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum.
6. How long we keep it
- Enquiries that go nowhere: deleted within 12 months.
- Client project files: kept for the duration of the relationship and 2 years after, so we can help if you come back.
- Invoices and accounting records: 6 years, as tax law requires.
7. Your rights
Under UK GDPR you have the right to:
- ask what we hold about you, and get a copy;
- have inaccurate data corrected;
- have data erased, where we have no continuing reason to keep it;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent, where we relied on consent.
Email hello@camm.design and we will respond within one month. There is no charge.
8. Security
Accounts are protected with strong, unique passwords and two-factor authentication where available. Access is limited to those who need it. No system is perfectly secure, but if a breach affected your rights and freedoms we would tell you, and the ICO, as required.
9. Children
Our services are aimed at businesses. We do not knowingly collect data about anyone under 18.
10. Complaints
If you are unhappy with how we have handled your data, please tell us first — we would like the chance to put it right. You also have the right to complain to the UK regulator:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk
11. Changes
If we change this policy we will update the date at the top. Material changes affecting existing clients will be told to them directly.