Privacy Policy

1. Data we collect

Name, email address and billing details you provide at checkout, plus any information you send us by email. Card payments are handled by Stripe; we never receive or store full card numbers.

Contact enquiries

When you use our contact form, we receive your name, email address, selected enquiry topic and message. If you include an order reference, project brief or other details in your message, those details also form part of your enquiry. The form forwards your enquiry to our business email address so that we can respond.

Please include only information relevant to your request. Do not send full payment card numbers, card security codes, passwords or API secret keys through the form or by email.

Website preferences and technical information

The website uses your browser’s local storage to remember your chosen language and light or dark appearance. You can remove these preferences by clearing this website’s stored data in your browser.

Our hosting infrastructure may process technical information, such as an IP address, when serving the website. The contact form also processes an IP-derived identifier and a short-lived security token to limit automated or repeated submissions. The form’s rate-limit record contains hashes and timestamps, rather than the content of your message.

2. How we use it

To process orders, deliver services, send receipts and support messages, and meet legal and accounting obligations. We do not sell your personal data.

For a contact enquiry, the relevant purpose is to understand your question, identify the product or project concerned, and reply using the contact details you provide. For an existing purchase, relevant order details help us locate the transaction and handle delivery, support, cancellation or refund enquiries.

Submitting an enquiry does not subscribe you to a marketing mailing list.

3. Sharing

Only with service providers needed to run our business (e.g. Stripe for payments, our hosting provider), or when required by law.

The providers involved depend on the interaction: a payment involves Stripe, while an enquiry submitted through this website is handled through our hosting and business email services. You can also review Stripe’s Privacy Policy for information about Stripe’s own processing.

4. Retention

Order records are kept as long as required for tax and accounting purposes. Other data is deleted on request when no longer needed.

The appropriate retention period depends on the reason the information was collected. An unresolved support request, a purchase record and a website display preference serve different purposes. A deletion request does not remove records that must still be retained to meet the legal and accounting obligations described above.

Contact-form security tokens expire after one hour. Rate-limit entries are excluded from processing after 24 hours and are removed when the rate-limit record is next updated. Contact messages remain subject to the enquiry and order-record retention principles above.

5. Your rights

You may request access, correction or deletion of your personal data by emailing info@404digital.com.

To help us identify the relevant records, describe the information or interaction your request concerns and, where possible, contact us from the email address used for that interaction. We do not need your full card number or card security code to locate a privacy enquiry.

6. Contact

Please use the contact details above for questions about this policy or our handling of your personal information. You may also use the contact form and select the general enquiry topic.