Privacy Policy
Last updated 29 August 2026
DiggsWorks is a small technology consulting firm. This page says plainly what we collect, why, and what we do not do. If something here is unclear, email hello@diggsworks.com and a person will answer.
Who we are
DiggsWorks, a technology consulting firm working with small and medium businesses. Contact: hello@diggsworks.com. We are the controller of the information described on this page.
What we collect
When you use the contact form
Your name, email address, business name and your message. That is the whole list. It is delivered to us as an email through our email provider (Postmark) and is not written to any database or advertising system. We keep it for as long as the conversation is useful and delete it on request.
When you sign in to a client portal
Some clients have a private portal we build and operate for them. Signing in uses Sign in with Google, and we request exactly two things from Google: that you are signed in, and your email address. Nothing else — no contacts, no calendar, no files, no profile, and no ongoing access to your Google account.
We use the email address for one purpose: to check it against a short list of people authorised for that portal. We store the address, the time you signed in, and a random session identifier so you do not have to sign in on every page. Actions you take inside the portal are recorded against your address, so the business can see who changed what.
Limited use. Information received from Google APIs is used only to provide and secure the portal sign-in described above. It is never transferred to anyone else, never used for advertising, and never used to build a profile. This adheres to the Google API Services User Data Policy, including its Limited Use requirements.
When our servers are asked for a page
Ordinary web server records: the request, a timestamp, and the network address it came from. These are kept briefly for security and troubleshooting.
What we do not do
- One analytics tool, no advertising trackers. The public site uses Google Analytics 4 to count visits and to record when the contact form is used, with IP anonymisation on and advertising features off. There is no advertising pixel and no cross-site tracking.
- Two kinds of cookies. Google Analytics sets its own
first-party cookies (named
_ga) on the public site. A portal session cookie is set only after you sign in, and clearing it signs you out. - We do not sell, rent or share your information with anyone for their own purposes.
- We do not send marketing email to addresses collected from the contact form.
Information belonging to our clients
When we build or operate a system for a client, that system may hold information about their customers — names, phone numbers, addresses, messages. That information belongs to the client, not to us. We handle it only to run the system we were engaged to run, under our agreement with that client, and we do not use it for any purpose of our own. If you are a customer of one of our clients and want your information removed, contact that business; we will support them in acting on it.
Who else can see it
We keep the list of people and companies who process anything on our behalf deliberately short:
- Vercel — hosts this website.
- Postmark — delivers contact-form messages to our inbox.
- Google — provides Google Analytics on the public site, and confirms who you are when you sign in to a portal, if you use one.
Each of these sees only what it needs to do that job. We disclose information otherwise only where the law requires it.
How long we keep it
Contact-form messages last as long as the conversation is useful. Portal sign-in records last while your access does; removing someone from a portal's authorised list ends their access on their next request. Server records are short-lived. Anything held on a client's behalf follows that client's retention decision.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@diggsworks.com and we will act on it. You can also revoke our access to your Google account at any time from your Google account permissions page — doing so ends portal sign-in but does not otherwise affect your account.
Children
Our work is with businesses. This site and our portals are not directed to children, and we do not knowingly collect information from them.
Changes
If this policy changes we will update the date at the top. Material changes affecting portal users will be told to them directly rather than left here to be discovered.