Privacy Policy

1. What We Collect

We collect the following information:

• Using our contact form: your name, email address, message, and optionally your company name and phone number.
• Booking a free call on our contact page: your name, email address, optionally your business name and phone number, your answers about the project, the date and time you choose and your time zone (so your emails show your local time).
• Using our project brief: your name, email address, business name, location and your answers about the project, and optionally your phone number and any links you share. If you opened the brief through a sales partner's link, we also record which partner referred you.
• Asking for our free guide: your name and email address, whether you asked for our newsletter, and when you opened the download link.
• Our newsletter (if you ask for it with the free guide or the website check, or if you send us an enquiry or book a call and do not tick the box to opt out): your name, email address, when and where you signed up and the wording you agreed to, which emails we have sent you, and when you unsubscribe.
• Using our free website check: the website address you enter, your email address and optionally your name, plus the results of the check. If you opened the check through a sales partner's link, we also record which partner referred you.
• Visiting the website: Vercel Web Analytics counts page views (the page, the referring site, your country, browser, operating system and device type) without cookies and without identifying you, and Vercel Speed Insights measures how quickly pages load.
• Contacting us by email, phone or WhatsApp: your contact details and anything you choose to include in your message.
• Working with us as a client: the information needed to deliver the project, invoice you, and provide support, including what you send through our project details form (business details, content, your logo, photos and other files).
• Technical data: when you use the contact form, the free guide form, the project brief or the website check, Google reCAPTCHA collects information such as your IP address and browser details to protect the form from spam and abuse. Our hosting provider, Vercel, may also keep standard server logs (for example IP address and request time) for security purposes.

2. How We Use Your Data

We use your personal data only for the purposes below, each with a lawful basis under UK GDPR:

• To reply to your enquiries, arrange consultations, and deliver the services you have agreed to — performance of a contract, or steps before one.
• To email you the free guide you asked for — steps you asked us to take (performance of a contract).
• To send our newsletter with new blog articles — your consent if you asked for it with the free guide or the website check, or with the button in the guide or website check email; if you sent us an enquiry or booked a call, our legitimate interests under the "soft opt-in" rule (you can opt out on the form, with the unsubscribe link in every email, or by emailing us).
• To understand how visitors use our website through Google Analytics and Microsoft Clarity — your consent, which you can withdraw at any time.
• To protect our website from spam, fraud and abuse, and to find and fix errors on it — our legitimate interests.
• To keep business and accounting records — compliance with our legal obligations.

3. Who We Share It With

We never sell or rent your personal data. We only share it with trusted service providers who help us run the website and our business, and only as far as needed:

• Google Analytics and Microsoft Clarity — optional usage analytics, device/browser information and interaction data after consent. Clarity provides heatmaps and session recordings. We mask enquiry fields and do not intentionally send form answers to either service.
• Resend — delivery of the free guide, our newsletter, contact form messages, project briefs, website check reports, booking confirmations, reminders and confirmation emails.
• Neon — the database that stores free call bookings, project briefs, blog posts and the list of people who asked for the free guide or our newsletter.
• Google (Calendar and Meet) — adds your booked call to our calendar with a video link and checks when we are free. Your name, email address and the call notes are added to the calendar event.
• Our sales partner — if you opened our project brief or website check through their link, we tell them your business name and location (brief) or the website address you checked (website check), so that the referral is credited to them. They do not receive your contact details or the rest of your answers.
• Cloudflare (R2 storage) — keeps the files you upload through our project details form, privately, until we have added them to your website.
• OpenStreetMap Foundation, or CARTO when its graphic basemap is enabled — supplies map tiles on our contact page. Loading the map sends your IP address and standard browser request information to the selected provider. Enquiry form answers are not shared with the map provider.
• Google (PageSpeed Insights) — runs the website check. We send Google only the website address you enter; your name and email are not shared with it.
• Google (reCAPTCHA) — spam and abuse protection on the contact form, call bookings, the free guide form, the project brief and the website check. Its use is subject to the Google Privacy Policy and Terms of Service.
• Sentry — error monitoring. When something breaks on our website, Sentry receives technical details such as the page address, browser and the error itself. It never receives what you type into forms, and it sets no cookies.
• Vercel — hosting and serving the website, cookie-free visitor statistics (Web Analytics) and page-speed measurements (Speed Insights).

4. International Transfers

Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum approved by the ICO.

5. How Long We Keep It

We keep enquiry data for up to 24 months after our last contact with you, unless you become a client. Free call bookings are deleted 2 years after the call, and project briefs 2 years after you send them. If you are on our newsletter, we keep your name and email address until you unsubscribe; after that, and if you only asked for the free guide, we delete them 2 years after your last sign-up or change. Files uploaded through our project details form are deleted from our file storage automatically after 90 days. Error reports in Sentry are kept for up to 90 days. Client records are kept for as long as needed to provide our services and for up to 6 years afterwards to meet UK accounting and tax requirements. After that, the data is securely deleted.

6. Cookies

If you accept analytics cookies, we load Google Analytics to measure page views and interactions, and Microsoft Clarity for heatmaps and session recordings to understand how visitors use our website. We do not load either service before you accept. We request analytics consent only; advertising consent stays denied. Our Vercel Web Analytics statistics work without cookies. Google reCAPTCHA, which loads on the contact form, the free guide form, the project brief and the website check, may set cookies needed for it to work and to detect abuse.

Our project brief and project details form keep your unfinished answers in your browser for the current tab only, so they are not lost if the page reloads. They are removed when you send the form or close the tab.

You can accept or decline analytics and change your choice at any time through the analytics preferences control on our Privacy Policy page. We remember your choice in local storage for 180 days. Withdrawing consent stops these services on this browser and removes their first-party analytics cookies; it does not automatically erase data already collected. Google Analytics may use _ga cookies, and Clarity may use _clck and _clsk cookies. You can also block or delete cookies in your browser settings.

7. Your Rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• object to or ask us to restrict how we process your data;
• receive your data in a portable format.

8. Making a Request or Complaint

To exercise any of these rights, contact us using the details below. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

9. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections and restricted access to your data. No method of transmission over the internet is completely secure, but we take reasonable steps to keep your information safe.

10. Links To External Sites

Our website links to other sites, such as our clients' websites, Google reviews and WhatsApp. We are not responsible for their privacy practices, so please review their policies when you visit them.

11. Changes To This Policy

We may update this policy from time to time. The latest version will always be on this page, with the effective date shown at the top.