Legal
What happens to your information when you contact me or read this site. In plain English, because a privacy policy nobody can read is not much of a promise.
Last updated 3 August 2026.
Sites by AJ is a sole trader web design business run by Adam, based on the Wirral, United Kingdom. For the purposes of UK data protection law I am the data controller for the information described on this page.
You can reach me at [email protected] about anything on this page, including a request for my postal address.
The form asks for your name, your email address, which service you are interested in and whatever you write in the message box. I use it for one thing: replying to you and, if we go ahead, running the project.
Form submissions are delivered to me by Formspree, which processes the message on my behalf and passes it to my inbox.
That tool takes the website address you enter and, if you ask for the full report, your email address. The website address is used to generate the report. The email address is used to send it to you and, unless you tell me otherwise, to follow up once about what the report found.
Tapping the WhatsApp button opens a conversation in WhatsApp itself. Anything you send there is handled under WhatsApp's own privacy policy, not this one. I keep those conversations so I have a record of what was agreed.
This site uses Google Analytics to count visits and see which pages get read. It sets cookies in your browser and tells me things like which page you landed on, roughly where in the world you are and what device you used. It does not tell me who you are.
It does not run unless you say yes. The banner on your first visit asks, and nothing analytics-related loads until you accept. Declining is remembered too, so you are not asked again. Your IP address is anonymised before Google sees it.
The site also loads its fonts from Google Fonts, and it is hosted on Cloudflare Pages. Both receive your IP address as a normal part of serving you the page. Cloudflare also keeps short-lived logs for security and performance.
For enquiries and project work, the basis is legitimate interests (replying to someone who has asked me to get in touch) and, once we are working together, performance of a contract. For analytics, the basis is your consent, given through the cookie banner.
You can change your mind whenever you like, and it takes one click:
If you would rather not rely on me at all, the Google Analytics opt-out add-on blocks it across every site you visit.
Enquiries that do not turn into work are deleted within 12 months. Records for clients I have worked with are kept for 6 years, because HMRC requires business records to be kept that long. Google Analytics data expires automatically after 14 months.
Only the services that make the site work, each acting on my instructions:
Some of these are based outside the UK. Where that is the case, transfers are covered by the safeguards those providers have in place, such as the UK addendum to the EU standard contractual clauses.
Under UK GDPR you can ask me to show you what I hold about you, correct it, delete it, restrict what I do with it, hand it over in a portable format, or object to me holding it at all. Email [email protected] and I will deal with it within one month. There is no charge.
If you are not happy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
If this policy changes, the date at the top of the page changes with it. There is no version history, so if the detail matters to you, save a copy.
Cookies. I use Google Analytics to see which pages get read, which sets cookies in your browser. Nothing else on this site tracks you and I never sell data. Privacy policy