This policy explains what personal information DigiNom Ltd collects through diginom.io, why we collect it, who we share it with, and the rights you have over it. We have written it to describe what this website actually does, rather than to cover every eventuality.
Last updated: 26 August 2026
Who we are
DigiNom Ltd is the data controller for the information described in this policy.
Controller details
- DigiNom Ltd, Office 302, Ellados 32, Paphos, 8020, Cyprus
- Registered in Cyprus, Company No. HE 481365
- Email: info@diginom.io
- Website: diginom.io
Because we are established in Cyprus, our processing is governed by the EU General Data Protection Regulation (GDPR) and Cypriot data protection law. Where we handle information about people in the United Kingdom, we apply equivalent standards under the UK GDPR.
What we collect, and why
Enquiries you send us
If you complete the enquiry form, we collect your name, email address, company name (optional) and the content of your message. We use this solely to respond to you and, where a conversation follows, to manage that relationship.
Our lawful basis is legitimate interests — responding to someone who has contacted us — and, where you are asking about engaging us, taking steps at your request prior to entering a contract.
Enquiries are stored as a private record in this website’s database and are also sent to us by email. We do not use enquiry details for marketing, and we do not add you to any mailing list on the strength of an enquiry.
Anti-spam and abuse prevention
When the enquiry form is submitted, we briefly record the submitting IP address so that we can limit the number of submissions from one connection. This record is automatically deleted after one hour. Our lawful basis is legitimate interests — keeping the form usable and protecting the site from abuse.
The form also asks a simple arithmetic question and includes a hidden field that automated systems tend to complete. Neither collects personal information.
Technical information and server logs
Our hosting provider records standard server logs, which typically include IP addresses, the pages requested, timestamps and browser user-agent strings. These are used to operate the service, diagnose faults and detect abuse. Our lawful basis is legitimate interests.
Analytics
Where you consent, we use Google Analytics and Google Search Console (via the Site Kit plugin) to understand how the site is used — which pages are read, how visitors arrive, and where things are not working. This involves cookies and the transfer of information, including your IP address, to Google.
Our lawful basis is consent. Analytics is not loaded unless you have accepted it, and you can withdraw consent at any time through the cookie settings on this site or by clearing cookies in your browser.
Fonts and other third-party content
This site loads typefaces from Google Fonts. When a page loads, your browser requests those font files directly from Google’s servers, which means Google receives your IP address and basic request information. We mention this specifically because it happens on every page load and is easy to overlook.
We do not embed social media widgets, advertising trackers or third-party comment systems.
Cookies and browser storage
We use as little of this as we can.
| What | Purpose | Consent needed |
|---|---|---|
| Theme preference | Remembers whether you chose light or dark mode. Stored in your browser’s local storage, contains no personal information, and is never sent to us or to anyone else. | No — strictly necessary to honour your choice |
| Consent record | Records the cookie choices you have made, so we do not ask again on every page. | No — strictly necessary |
| Analytics cookies | Set by Google Analytics to measure site usage, as described above. | Yes |
| WordPress session cookies | Set only if you log in to administer the site. They are not set for ordinary visitors. | No — strictly necessary |
We do not set advertising or cross-site tracking cookies.
Who we share information with
We do not sell personal information, and we do not share it for anyone else’s marketing. We use the following service providers, who process information on our instructions:
| Provider | What they do for us |
|---|---|
| Hostinger | Hosts this website and its database, including stored enquiries. |
| ZeptoMail (Zoho) | Delivers the notification emails generated by the enquiry form. |
| Microsoft 365 | Hosts our business email, where enquiries arrive and correspondence is kept. |
| Serves the fonts used on this site, and — where you consent — provides analytics and search performance data. |
We may also disclose information where we are required to by law, or where it is necessary to establish, exercise or defend legal claims.
International transfers
Some of the providers above may process information outside the European Economic Area, in particular Google. Where that happens, transfers are made under the safeguards permitted by the GDPR — most commonly the European Commission’s Standard Contractual Clauses, or an applicable adequacy decision.
How long we keep it
- Enquiries that do not lead to a working relationship: up to 24 months from our last substantive contact, after which they are deleted.
- Enquiries that become client relationships: retained for the duration of the engagement and then for as long as we are required to keep business records, or for as long as a claim could reasonably be brought.
- Anti-spam IP records: one hour.
- Server logs: for the period operated by our hosting provider.
Your rights
Under the GDPR you have the right to:
- ask what personal information we hold about you, and get a copy of it
- have inaccurate information corrected
- ask us to delete information we no longer have a good reason to keep
- ask us to restrict how we use it, or object to our use of it where we rely on legitimate interests
- receive information you gave us in a portable format
- withdraw consent at any time, where we rely on consent
To exercise any of these, email info@diginom.io. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy), or to the supervisory authority in your own country. In the UK that is the Information Commissioner’s Office (ico.org.uk). We would rather you raised it with us first, so we have the chance to put it right.
Security
This site is served over HTTPS, access to the administration area is restricted and protected by application-level credentials, and enquiry data is held in a database that is not publicly accessible. No system is perfectly secure, but we take reasonable measures proportionate to the information we hold — which, deliberately, is not very much.
Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. The enquiry form’s spam checks are simple technical filters, not decisions about you.
Children
This site is aimed at businesses. We do not knowingly collect information about children, and the site is not directed at them.
Changes to this policy
If we change how we handle personal information, we will update this page and revise the date at the top. Material changes will be described rather than made quietly.
How to contact us
Email info@diginom.io, or write to DigiNom Ltd, Office 302, Ellados 32, Paphos, 8020, Cyprus.