Skip to content

Legal

Privacy Policy

Last updated 13 October 2026

This policy explains what personal information I collect through peacebadejo.design, why I collect it, who else handles it, how long I keep it, and the rights you have over it.

I'm Peace Badejo, a product designer based in Birmingham, United Kingdom. Under UK data protection law I'm the “controller” of the information described here, which means I decide how it is used and I'm responsible for it.

1.The short version

  • Browsing the site sets no tracking cookies and shows no adverts. I only see anonymous visit counts.
  • If you send me a message, I use your name, email and message to reply.
  • If you're a client, your private project page holds the details you give me, the files you upload and your contract.
  • I don't sell your information, and I don't use it for marketing.

2.If you browse the site

Visit counts

I use Vercel Web Analytics to see how many people visit and which pages they read. It works without cookies. It records the page visited, the page you came from, your browser, operating system, device type and country. It does not store your IP address, and it can't follow you from one day to the next or across other websites, so I can't identify you from it.

Hosting

The site is hosted by Vercel. To deliver pages and keep the site secure, Vercel processes technical details of each request, including your IP address.

Things saved in your browser

The site remembers three preferences on your own device: light or dark theme, which homepage layout you chose, and whether you've seen the layout hint. They stay in your browser and are never sent to me.

Links to other sites

Links to places such as LinkedIn, Dribbble, Figma, GitHub or my booking calendar take you to services run by other companies. Their own privacy policies apply once you're there.

3.If you send me a message

The contact form asks for your name, your email address and your message. A service called Web3Forms delivers it to my inbox. If you email or phone me directly, or book a call through my Google Calendar page, I receive whatever you share there.

I use this to reply to you and to talk about possible work. The legal basis is my legitimate interest in answering people who contact me, or taking steps you've asked for before we agree a contract.

4.If you're a client with a project page

Clients get a private page for their project. It is reached through a private link plus a one-time code emailed to you, and only you and I can open it. Here is what it holds.

Your basic record
Your name, company, email address and project name, which I enter when I set up your page.
Signing in
When each one-time code was requested and a scrambled version of the code (never the code itself). One cookie keeps you signed in on that device for up to 30 days.
Details you fill in
Contact and business details, your project brief, and billing details such as the name, email and address for invoices and a VAT number if you give one. Please don't enter card or bank details; they are never needed on the page.
Files you upload
Logos, brand guidelines, photos, documents and anything else you choose to send.
Your contract
The wording of the contract and, when you sign, the name you typed, the date and time, your email address, your IP address and the type of browser you used. These are kept as evidence of the agreement.
Project status and emails
The stage and notes I post about your project, and a record of when notification emails were sent to you.

Why I use it

  • To carry out our contract, or to take steps you've asked for before we sign one: running the project, invoicing you and keeping you updated.
  • My legitimate interests in keeping a reliable record of what was agreed and in keeping your page secure.
  • Legal obligations, such as keeping business and tax records.

The cookie

The sign-in cookie is strictly necessary for the page to work, so it doesn't need consent. It is not used for tracking, and visit counting is switched off on client pages.

5.Who else handles your information

I don't sell your information or share it for advertising. I use a small number of companies to run the site, and they handle information only on my instructions:

  • Vercel hosts the site and provides the visit counts.
  • Supabase stores client records and uploaded files, in a data centre in London.
  • Resend sends sign-in codes and notification emails.
  • Web3Forms delivers contact form messages.
  • Google provides my email and booking calendar.

Some of these companies are based outside the UK, mainly in the United States. Where information is transferred abroad, it is protected by safeguards recognised under UK law, such as the UK–US Data Bridge or standard contractual clauses.

I may also share information with my accountant or other professional advisers where needed, or where the law requires it.

6.How long I keep it

  • Visit counts are anonymous totals. I hold nothing about you personally.
  • Messages and enquiries are kept for up to two years after we last spoke, unless we go on to work together.
  • Client records (your details, files, contract and invoices) are kept for the length of the project and for up to six years after it ends. That covers the period in which a legal claim could be brought and the time I must keep tax records.
  • Uploaded files can be removed by you at any time from your project page. You can also ask me to delete your details or files earlier, and I will unless I need them for a legal reason.
  • Signed contracts can't be changed by anyone and are kept for the six years above.
  • Sign-in codes stop working after 10 minutes, and a device stays signed in for up to 30 days.

7.How I keep it safe

  • The whole site is served over an encrypted connection (HTTPS).
  • A project page needs both its private link and a one-time code sent to the client's own email.
  • Uploaded files sit in private storage and can only be fetched through links that expire after a minute.
  • Sign-in codes are stored in scrambled form, so they can't be read back from the database.
  • Only I have access to the admin area.

No system can be guaranteed completely secure. If a breach ever put your information at risk, I would tell you and the Information Commissioner's Office where the law requires it.

8.Your rights

Under UK data protection law you can ask me to:

  • give you a copy of the information I hold about you;
  • correct anything that is wrong or out of date;
  • delete your information, where I don't have a legal reason to keep it;
  • stop or limit how I use it;
  • send it to you or to someone else in a commonly used format.

To use any of these, email badejopez@gmail.com. I'll reply within one month, and there is no charge.

If you're unhappy with how I've handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

9.Children

This site is for businesses and professionals. It isn't aimed at anyone under 18, and I don't knowingly collect their information.

10.Changes to this policy

If the site starts collecting something new or using a different service, I'll update this page and the date at the top. If a change affects information I already hold about you as a client, I'll tell you directly.

11.How to contact me

For anything about this policy or your information:

Based in
Birmingham, United Kingdom