This notice explains what happens to information when you use rolfe.design, send a project enquiry or choose to listen through Spotify.
Who is responsible?
I’m Daniel Rolfe, the independent graphic designer behind rolfe.design and the controller of personal information I receive through enquiries. For privacy questions or requests, email daniel@rolfe.design.
Browsing the site
The site has no advertising pixels, visitor analytics script, account registration or newsletter tracking. Its images, fonts, background film and project videos are served with the website. The modular grid calculator and type specimen process your input in the browser, without saving it to website storage or sending it to me.
Cloudflare Pages is the selected host for rolfe.design. When the public site is served through Cloudflare, it processes connection and request information, such as IP addresses, requested URLs and browser details, to deliver pages and protect its network. The purpose of hosting and security processing is reliable, secure operation of this site; the lawful basis is legitimate interests. I do not maintain a separate visitor access-log database.
Cloudflare’s processing, service retention and international transfer arrangements are explained in its privacy policy and data processing addendum.
Project briefs and messages
When you select “Send enquiry”, your name, email address, project brief and any optional project details are sent to Formspree to process the enquiry, screen it for spam and deliver it to me. Submissions are stored in my Formspree account. Formspree may process connection information such as your IP address and browser details and may ask you to complete a spam check. Its submission page may use cookies or similar technologies. No Formspree or CAPTCHA script loads on this site before you send the form. See Formspree’s privacy policy for its processing, retention and international transfers, including processing in the United States. The website does not save your enquiry in browser storage; your browser may retain entries under its own settings.
When you send an enquiry through the form, email me or send a LinkedIn message, I receive the details you send, such as your name, contact information and project brief. I use these to respond and discuss the work. The lawful basis is taking steps at your request before entering a contract, or legitimate interests in responding to other correspondence. Providing these details is voluntary; without enough contact or project information I may be unable to reply or assess the brief.
I keep correspondence while it is needed to discuss the enquiry, provide the agreed work or resolve related questions. After that, I keep only what is necessary for contractual, accounting or legal obligations or the handling of a genuine dispute, reviewing and deleting information when those reasons no longer apply. Information you send through email or LinkedIn is also handled by the provider of that service.
Optional Spotify playback
Spotify is off by default. Its player and script load only after you choose “Enable Spotify”. This allows Spotify to receive connection, device and playback information and use cookies or similar storage, potentially including its own analytics, personalisation and advertising purposes. The basis for enabling this optional connection and storage is your consent.
The site uses Spotify’s official embedded player, not access to Daniel’s account. The displayed songs are a saved selection. You can withdraw your choice at any time on Cookies & choices; this stops playback and removes the player. Withdrawal does not undo earlier processing or erase cookies already held by Spotify. Spotify explains its own purposes, retention, international transfers and controls in its privacy policy and cookies policy.
Browser storage and external links
The site remembers your Spotify choice for up to 180 days. Small session-storage values manage the introduction and logo-return animation until the tab session ends. These values do not contain your project brief or account credentials. See the full explanation on Cookies & choices.
Ordinary outbound links, including LinkedIn and MoRunning, connect to those sites when you follow them. The destination’s privacy practices then apply. This site does not sell your personal information or make automated decisions with legal or similarly significant effects about you.
Your rights and choices
Depending on the circumstances, you can request access to, correction or deletion of your personal information, restriction of its use, or a portable copy. You can withdraw Spotify consent in the site settings.
You can object to processing based on legitimate interests. Contact daniel@rolfe.design to exercise your rights or ask about processing, recipients, retention or international-transfer safeguards. I will respond in accordance with applicable data protection law.
You can also complain to the UK Information Commissioner’s Office through the ICO complaints service. Please contact me first if you would like me to help resolve a concern.



