Privacy Notice
I respect the privacy of every individual who visits my website, contacts me and works with me. I'm committed to safeguarding your privacy and have written this privacy notice to explain what information I collect, and what I do with it.
This policy may change so please check it periodically. It was last updated on 25th June 2026.
Who is the data controller?
For the purposes of the personal data described in this notice, the data controller is me, Martin Hicks.
I operate in accordance with the Data Protection Act 2018 (UK GDPR) and EU 2016/679 (The GDPR).
If you commission me to work on your behalf, you would be the data controller and I would be a data processor for the personal data involved in your project or software.
How do I obtain your personal data?
I may obtain your personal data in a variety of ways, including:
- From inbound enquiries via email
- From inbound phone calls where I see the incoming phone number and you pass me information verbally
- From your registration onto my software systems
- From data you supply while working together during commissioned projects, or during new business activities and the act of commissioning new work
- From networking activities and events, for example exchanging business cards or connecting on Linkedin.
- From recommendations or references about you from others
- From contact from and conversations with my suppliers
- From website analytics
Any information you give me should be accurate, and if supplying anyone else’s data you must ensure that you have the authority and legal basis to do so.
What personal data is processed?
Depending on your relationship and activity with me, I may process different types of information about you, including:
- Name
- Email address
- Phone number
- Home address
- Job title
- Business name and address
- IP addresses
- Social media usernames/handles
- Browser information
- Bank account information
How is your personal information used?
The personal data you give me may be used in a variety of ways:
- Communicating with you as a customer, about new or currently commissioned projects
- Performing accounts tasks, such as raising and sending invoices
- Storing in databases for reference by me and my suppliers
Who is my information shared with?
Your personal data will not be sold or disclosed to anyone outside of my business or my appointed suppliers, without obtaining your prior consent - unless I am required to do so by law.
Retention of your personal information
I will only keep your personal data for as long as it is relevant to the purpose for which it was collected or for as long as I am required to keep it by law.
What is my legal basis for processing your data?
In most cases the processing is necessary for the performance of a contract between myself and you.
Your rights
You have the right to request access to the personal data that I hold about you - this is known as a Subject Access Request (SAR). If you wish to make an SAR about the personal data I hold about you, please email hello@martinhicks.dev. I will respond within 30 days to provide you with the data I hold about you in a commonly-used electronic format. There is no charge for this service, however if requests become manifestly unfounded, excessive or repetitive, I may charge a fee appropriate to the administrative work required.
You have the right to request a rectification of your personal data. To do so, please email hello@martinhicks.dev. I will respond within 30 days, although can be extended by two months if the request for rectification is complex. If I decide not take action in response to a request for rectification, I will explain to you my reasons.
You have the right to the deletion or removal of your personal data where there is no compelling reason for its continued processing. To request deletion of your personal data, please email hello@martinhicks.dev. I may refuse to comply with a request for erasure in some circumstances, for example in the case of requiring the information as part of a legal obligation, such as my statutory accounts and records.
You have the right to suppress or restrict the processing of your personal data. To request this, please email hello@martinhicks.dev.
You have the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services. To request this, please email hello@martinhicks.dev. I will respond within 30 days to provide you with the data I hold about you in a commonly-used electronic format. This time can be extended by two months if the request is complex.
You have the right to object to:
- direct marketing
- processing based on legitimate interests
- processing for purposes of scientific/historical research and statistics.
To make an objection to processing, please email hello@martinhicks.dev.
How I protect your information
I take a range of organisational and technical measures to protect your information. I maintain strict physical, electronic and administrative safeguards to protect your personal data from unauthorised or inappropriate access.
Where appropriate I use industry-standard encryption techniques, including encrypting web traffic using HTTPS.
I hold regular security reviews to ensure that my systems and processes remain safe and secure for the protection of your personal data.
I keep software up to date with latest security patches as advised by the vendors of the software.
I use password management software to secure and encrypt credentials you give me, and to ensure my choice and use of passwords is secure.
Where you have registered onto my software systems with a self-chosen password, I ask you not to use that same password on any other systems. You are responsible for the security of your own passwords.
Is any of my data sent outside of the EU?
Yes, possibly - I use suppliers such as Google and Amazon Web Services who are based in the US, but have data centres in the UK and EU. Wherever possible I select data centres in the EU, however it’s likely some data is stored in the US.
People under the age of 16
If you are under 16, please ensure that you obtain your parent/guardian's consent, and evidence of that consent, before you provide personal information to me.
Analytics
This site uses Altino, a privacy-friendly analytics product from Si Novi, to count visits and see which pages get read. It does not use cookies, local storage or fingerprinting, so nothing is saved on your device and there is no banner to click.
What it measures is the page you visited, the site that referred you (the domain only), your browser and device type, and an approximate location (country and city) worked out from your IP address. Your IP address itself is not stored. It is used for a moment to derive that rough location and a daily, one-way visit count, then discarded. Only aggregate totals are kept, never anything that identifies you.
If your browser sends a Do Not Track signal, this site records nothing at all.
My legal basis for analytics is legitimate interest: understanding how my own site is used. The data is processed by Altino, which is run by Si Novi, and is not sold, shared, or used for advertising.
Cookies
A cookie is a small piece of data a website stores in your browser. This site sets no cookies of its own. The analytics above are cookieless, and there is no consent banner because there is nothing stored on your device to consent to.
If you visit a page with content embedded from a third-party service, that service may set its own cookies. I do not control those, so check the third party's own privacy notice if you want the detail.
Links to Other Websites
This website and other communications may contain links to other third-party websites. You should be aware that I do not have any control over other these third-party websites, and therefore I cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites. Such sites are not governed by this privacy notice.
You should exercise caution and look at the privacy notice applicable to the website in question.
Contact
For any questions about this Privacy Notice, or my approach to data protection, please contact me: