Privacy policy

Last updated 3 March 2026. Written to be read, not just to be agreed to.

Contents

  1. Who we are
  2. What we collect
  3. How we use it
  4. Legal basis
  5. Cookies and analytics
  6. Who we share it with
  7. How long we keep it
  8. Your rights
  9. Contact and complaints

1. Who we are

Patchwork is a trading name of ddtxv inc. (“we”, “us”). Our studio is at 2nd floor, Weaver’s Court, 18 Bridle Lane, Leeds LS11 9DQ. We are the controller for the personal data described in this policy. This policy covers this website, enquiries you send us and job applications. It doesn’t cover the software we build for clients; each client is the controller for their own users’ data.

2. What we collect

  • Enquiries: your name, email address, organisation and whatever you tell us about your project, when you use our contact form or email us.
  • Job applications: your CV, covering note, any links you send, and our notes from interviews.
  • Clients: names, work email addresses and phone numbers of the people we work with, plus invoicing details.
  • Website visits: our hosting provider keeps standard server logs (IP address, browser, pages requested) for security purposes.

3. How we use it

We use your details to reply to you, to run projects we’ve agreed with you, to assess job applications and to send invoices. We don’t sell personal data, we don’t use it for advertising, and we won’t add you to a mailing list unless you ask to join one.

4. Legal basis

Under the UK GDPR we rely on: legitimate interests for replying to enquiries and keeping server logs; contract for client work and employment; legal obligation for keeping financial records; and consent for our release notes newsletter, which you can withdraw at any time with the link at the bottom of every issue.

5. Cookies and analytics

This website doesn’t set any cookies and doesn’t use third-party analytics or tracking scripts. We count page views from our server logs, which are anonymised after 30 days. Fonts are loaded from a public font service, which receives your IP address in order to deliver them.

6. Who we share it with

We use a small number of processors to run the business: an email and document provider, an accounting package, and our website host. All store data in the UK or the European Economic Area, or under approved safeguards. We will share data with authorities only where the law requires it.

7. How long we keep it

  • Enquiries that don’t become projects: 12 months, then deleted.
  • Unsuccessful job applications: 6 months, unless you ask us to keep them on file for longer.
  • Client and financial records: 6 years after the end of the financial year they relate to.
  • Server logs: 30 days in full, then anonymised.

8. Your rights

You can ask us for a copy of the data we hold about you, ask us to correct or delete it, object to how we use it, or ask us to restrict processing. We’ll respond within one month and won’t charge you.

9. Contact and complaints

Write to privacy@ddtxv.xyz or to the studio address above, for the attention of Ruth Ellery. If you’re not happy with our answer, you can complain to the Information Commissioner’s Office, the UK data protection regulator.

If we change this policy in a way that matters, we’ll update the date at the top and, for clients, mention it in the next Friday note.