Privacy Policy
Last updated: 13 October 2026
1. Who I am
Oscar Flores is a self-employed web designer based in Exeter, United Kingdom, providing bespoke website design and digital content services to small businesses.
I operate as a sole trader under my own name, Oscar Flores.
For the purposes of applicable data protection law, I am responsible for deciding how and why personal information is used in connection with this website and my business.
If you have any questions about this policy or how your personal information is handled, you can contact me at:
Email:
2. What information I collect
I may collect personal information when you contact me through this website, enquire about my services or work with me on a project.
Depending on how you interact with the website, this may include:
-
Contact details: your name, email address and any other contact details you choose to provide.
-
Enquiry and project information: the contents of your messages, project requirements, quotations and related correspondence.
-
Technical information: information such as your IP address, browser type, device information and server logs, where collected by the website, its hosting provider or analytics services.
-
Cookie and consent information: your cookie preferences and records of the choices you make through the website's consent management tool.
Please avoid including sensitive personal information in messages sent through this website unless it is necessary and you have an appropriate reason to provide it.
3. How I use your information
I use personal information where necessary to:
-
Respond to enquiries and discuss potential projects.
-
Prepare quotations, agree project requirements and provide my services.
-
Communicate with clients about their projects and related support.
-
Maintain website security and investigate technical issues.
-
Keep appropriate business, accounting and tax records.
-
Manage cookie preferences and maintain records of consent choices.
-
Understand how visitors use the website and assess its performance through analytics, where the required consent has been obtained.
I do not sell or rent your personal information.
4. Lawful basis for processing
I process personal information under one or more of the following lawful bases, depending on the circumstances:
-
Contract: where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.
-
Legitimate interests: where processing is necessary for legitimate business purposes, such as responding to relevant business enquiries, maintaining website security and managing client relationships, provided those interests do not override your rights and freedoms.
-
Legal obligation: where processing is necessary to comply with applicable legal requirements, including accounting and tax obligations.
-
Consent: where you have freely agreed to a specific use of your personal information, such as analytics cookies where consent is required.
Where processing relies on consent, you can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew it.
Where I rely on legitimate interests, you have the right to object in the circumstances provided by applicable data protection law.
5. Contact forms and email
If you submit an enquiry through my website, I use the information you provide to respond to your message and, where relevant, discuss a potential project.
Information submitted through the website's contact form may be stored in the website's database and used to generate an email notification. My email and website service providers may process this information as necessary to deliver, store and manage communications.
Submitting an enquiry does not automatically subscribe you to marketing emails. I will not use your enquiry details for unrelated marketing without an appropriate lawful basis.
6. How long I keep your information
I retain personal information only for as long as reasonably necessary for the purposes for which it was collected, taking account of applicable legal requirements.
For example:
-
Enquiries: information about enquiries that do not lead to a project is retained only as long as necessary to respond and manage any reasonable follow-up.
-
Client and project records: correspondence and project information may be retained during the business relationship and afterwards where necessary for legitimate business purposes or legal obligations.
-
Accounting records: records are retained for the periods required by applicable law.
-
Consent records: records of cookie preferences and consent choices are retained according to the settings of the consent management system.
When information is no longer required, I will securely delete it or anonymise it where appropriate.
7. Who may process your information
I may use third-party service providers where necessary to operate my website and business. Depending on the services involved, these may include:
-
Website hosting and technical infrastructure providers.
-
Business email providers.
-
Website form and security services.
-
Cookie consent management services.
-
Website analytics providers, including Google Analytics 4.
These providers may process personal information on my behalf or, depending on the service and circumstances, act as separate data controllers.
Where personal information is transferred outside the United Kingdom, I will ensure that appropriate safeguards are in place where required by applicable data protection law.
8. Cookies and website analytics
This website uses a consent management tool to help visitors manage their cookie preferences.
Essential technologies may be used where permitted by applicable law. Non-essential cookies and similar technologies, including those used for analytics where consent is required, should not be enabled before the relevant consent has been obtained.
I use Google Analytics 4 to understand how visitors interact with the website and identify opportunities to improve its content and performance. The information collected may include page views, interactions, technical information and online identifiers.
You can manage your preferences through the cookie settings available on this website. You can also withdraw or change your consent through those settings.
For details of the cookies and similar technologies used, their purposes and their retention periods, please see the separate Cookie Policy.
9. Keeping information secure
I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
No method of transmitting or storing information is completely secure. However, I take appropriate steps to protect the information I handle.
10. Your data protection rights
Depending on the circumstances and the applicable law, you may have the right to:
-
Request access to the personal information I hold about you.
-
Ask for inaccurate information to be corrected.
-
Request the erasure of your information.
-
Request restriction of processing.
-
Object to processing based on legitimate interests.
-
Request a copy of certain information in a portable format, where the right to data portability applies.
-
Withdraw consent where processing is based on consent.
-
Complain to the relevant data protection authority.
To exercise your rights, contact me at
You also have the right to complain to the UK Information Commissioner's Office (ICO) if you have concerns about how your personal information has been handled. Further information is available at ico.org.uk.
11. External websites
This website may contain links to third-party websites. I am not responsible for the privacy practices or content of websites I do not operate. Please review their privacy information before providing personal information to them.
12. Changes to this policy
This policy may be updated when my services, website technologies or legal obligations change. The latest version will be published on this page with its revision date.
13. Contact
For questions about this Privacy Policy or the handling of your personal information, contact:
Oscar Flores
Self-employed web designer
Exeter, United Kingdom
Email: