Privacy policy

This policy explains what personal data I collect, why I collect it, where it is stored and what rights you have over it. It is short, because I collect very little.

Last updated 26 September 2026

Who I am

oe designs is the freelance graphic design and illustration practice of Orla Evans, based in Oxfordshire, United Kingdom. For the purposes of UK data protection law I am the data controller for personal data collected through this website. You can reach me at orla.evans@oedesigns.uk.

What I collect

If you use the contact form on this site, I collect the information you type into it: your name, your email address, the type of project you are enquiring about, and your message. Alongside that submission your IP address and the date and time it was sent are recorded automatically, which helps detect abuse of the form.

To understand how the site is used, I run Umami, a privacy-focused analytics tool. When you view a page it records the page address, the site that referred you, your browser, operating system, device type, screen size, language and approximate location (country, region and city), along with how quickly the page loaded. Your IP address is used to work out that location and an anonymous visitor identifier, and is not stored.

Umami also records how you use each page: where you click and how far you scroll, which I view as heatmaps; clicks on key links and buttons, such as email links and the contact form; and a session replay, a reconstruction of your visit showing your mouse movements, clicks and scrolling. Anything you type into a form is masked in your browser before it is sent, so replays never show what you enter. I do not use replays to identify you.

Umami sets no cookies, stores nothing on your device and does not track you across other websites. If you would rather not be included, blocking analytics.dabinette.com with a content blocker stops it entirely.

I do not set any cookies, I do not run advertising trackers, and I do not build profiles of visitors. If you email me directly, I hold that correspondence in the ordinary way.

Why I use it

I use the details you send me to read your enquiry and reply to it, and to carry out any work you go on to ask me for. My lawful basis is legitimate interests, namely responding to a request you have chosen to send, and where we go on to work together, performance of a contract. I do not send marketing emails and I never sell or rent your data.

I use analytics to see which pages are viewed, how people find the site and where they get stuck, so I can improve it. My lawful basis is legitimate interests.

Where it goes

Contact form submissions are handled by infrastructure run by my web developer, Dabinette, on Amazon Web Services in the London (eu-west-2) region. Each submission is stored in a database there and emailed to me using Amazon Simple Email Service. This site itself is served as static files from Amazon S3 and CloudFront.

Analytics data is stored on an Umami server run by Dabinette, also on Amazon Web Services in London. Requests to it pass through Cloudflare, which provides its network and security, so your IP address is visible to Cloudflare as part of that request. No other third party receives your data through this site.

How long I keep it

I keep enquiries for as long as I need them: to reply, to keep a record of work discussed or carried out, and to meet my own accounting and legal obligations. Submissions are not deleted automatically. If you would like your enquiry removed sooner, email me and I will delete it.

Analytics records, including replays, are kept for as long as I run this site. They contain no names, contact details, IP addresses or anything typed into forms.

Your rights

Under UK GDPR you have the right to ask for a copy of the personal data I hold about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how I use it, and to ask for it in a portable form. Email orla.evans@oedesigns.uk and I will respond within one month.

If you are unhappy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though I would appreciate the chance to put things right first.

Changes to this policy

If I change how I handle personal data I will update this page and change the date above. This version was published on 26 September 2026.