Privacy Policy

1. What data we collect

When you use the contact form on our website, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• The content of your message

We do not collect any data passively through analytics tools, cookies, or tracking scripts at this time.

2. How we collect it

We collect data only when you voluntarily submit the contact form on our website. Form submissions are processed and stored via Netlify Forms, a service provided by Netlify, Inc.

Netlify may temporarily process your submission on its servers. You can read Netlify’s privacy policy at https://www.netlify.com/privacy/

3. Why we collect it

We use your contact data solely to:

• Respond to your enquiry
• Discuss your project or service requirements
• Follow up if you have requested a callback or consultation

We do not use your data for marketing without your explicit consent, and we do not sell or share your data with third parties for commercial purposes.

4. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Legitimate interests — to respond to enquiries from people who have chosen to contact us
• Contractual necessity — where you are an existing or prospective client and processing is required to deliver our service

5. How long we keep your data

We retain enquiry data for up to 12 months after your last contact with us. If you become a client, we may retain relevant communications for the duration of our working relationship and for up to 6 years afterwards for legal and accounting purposes.

6. Third-party services

Your data may pass through the following third-party services in the course of our operations:

• Netlify Forms — for contact form processing and delivery
• GoCardless — for recurring Direct Debit payments (client data only)
• Stripe — for card payment processing (client data only)

Each of these services has its own privacy policy and data processing agreements. They are only used for the specific purpose stated and do not receive data beyond what is necessary.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (the “right to be forgotten”)
• Object to or restrict our processing of your data
• Withdraw consent at any time where consent is the legal basis

To exercise any of these rights, please contact us at troy@webbercreative.com. We will respond within 30 days.

8. Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)
https://ico.org.uk
Telephone: 0303 123 1113

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this Privacy Policy, please contact: