Privacy Policy
Data Controller
Jason Murphy
Privacy Policy
Last updated: [Date, e.g., 30 October 2026]
This Privacy Policy explains how Murphy Digital Drafting ("we", "us", or "our") collects, uses, shares, and protects your personal information when you visit https://www.murphydigitaldrafting.co.uk (the "Website").
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Important Information and Who We Are
Data Controller
Murphy Digital Drafting is the controller responsible for your personal data.
Contact Details
If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us using the details below:
Full name of legal entity: Murphy Digital Drafting
Email address: jason@murphydigitaldrafting.co.uk
2. The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer the following kinds of personal data:
Identity Data: Includes first name, last name, username, or similar identifier.
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
Financial Data: Includes bank account and payment card details (processed securely via our payment providers).
Transaction Data: Includes details about payments to and from you and details of products or services you have purchased from us.
Technical Data: Includes internet protocol (IP) address, login data, browser type and version, time zone setting, operating system, and platform.
Usage Data: Includes information about how you use our Website, products, and services.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
3. How We Collect Your Personal Data
We use different methods to collect data from and about you, including through:
Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our site, subscribing to a newsletter, placing an order, or contacting us.
Automated Technologies or Interactions: As you interact with our Website, we automatically collect Technical Data about your equipment, browsing actions, and patterns via cookies and server logs.
Third Parties: We may receive personal data about you from third parties such as analytics providers (e.g., Google Analytics) or payment processors.
4. How We Use Your Personal Data & Lawful Bases
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data under the following lawful bases:
Purpose / Activity
Type of Data
Lawful Basis for Processing
To register you as a new customer
Identity, Contact
Performance of a contract with you
To process and deliver your order
Identity, Contact, Financial, Transaction
Performance of a contract with you; Necessary for our legitimate interests
To manage our relationship with you (e.g., updates to terms)
Identity, Contact, Marketing
Performance of a contract; Necessary to comply with a legal obligation
To administer and protect our business and Website
Technical, Usage
Necessary for our legitimate interests (running our business, IT security)
To deliver relevant website content and advertisements
Identity, Contact, Technical, Usage
Necessary for our legitimate interests; Consent (for marketing cookies)
To send marketing communications
Identity, Contact, Marketing
Consent (or soft opt-in where legally applicable)
5. Third-Party Sharing
We may share your personal data with trusted third parties for the purposes set out above:
Service Providers: Companies that provide IT, system administration, web hosting, and logistics/delivery services.
Payment Processors: Secure payment gateways (e.g., Stripe, PayPal) to process payments safely.
Analytics & Search Engines: Providers that assist us in the improvement and optimization of our Website.
Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy or legal services.
Regulators & Authorities: HM Revenue & Customs, regulators, and other authorities where required by law.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. International Data Transfers
Whenever we transfer your personal data outside the UK (e.g., to third-party servers based in the US or EU), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Transferring data to countries deemed to provide an adequate level of protection by the UK Government.
Using UK-approved Standard Contractual Clauses (SCCs) or the International Data Transfer Agreement (IDTA) with service providers.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted to employees, agents, contractors, and other third parties who have a business need to know.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (such as HMRC tax rules, which require retaining invoice data for 6 years).
9. Your Legal Rights
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of incomplete or inaccurate data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no good reason for us continuing to process it.
Right to Object: Object to the processing of your personal data for direct marketing or based on legitimate interests.
Right to Restrict Processing: Request the suspension of processing your personal data.
Right to Data Portability: Request the transfer of your personal data to you or a third party.
Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.
If you wish to exercise any of these rights, please contact us at [privacy@yourwebsite.co.uk].
Complaints to the ICO
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.
10. Cookies
Our Website uses cookies to distinguish you from other users and to provide a better browsing experience. For detailed information on the cookies we use and the purposes for which we use them, please see our [Cookie Policy / Cookie Banner Settings].
11. Third-Party Links
Our Website may include links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.