Privacy Policy

This privacy policy explains how The Website Department ("we", "us", "our") collects, uses and protects your personal information when you visit thewebsitedepartment.co.uk or get in touch with us.

We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

1. What information we collect

We collect information in the following ways:

• When you contact us (email, phone, or a contact form) — your name, email address, phone number, and anything you tell us about your project.
• If you become a client — additional details needed to deliver the work, such as billing address, business name, and login details for your website or hosting where relevant.

We do not knowingly collect any special category data (e.g. health, religion) unless you volunteer it, and we don't collect data from anyone we know to be under 18.

2. How we use your information

We use your information to:

• Respond to enquiries and provide quotes
• Deliver website design, build, and care services under our contract with you
• Send invoices and manage payment
• Send occasional updates about our services, only if you've opted in
• Keep our site secure and understand how it's used

3. Legal basis for processing

Depending on the activity, we rely on:

• Contract — processing needed to deliver a service you've asked for
• Consent — for marketing emails or non-essential cookies, which you can withdraw at any time
• Legitimate interests — for basic analytics and keeping the site secure
• Legal obligation — for keeping financial records (e.g. invoices) as required by law

4. Cookies

We are not using any tracking cookies on this site. I love a double chocolate cookie myself.

5. Sharing your information

We don't sell your data. We may share it with:

• Trusted third-party services that help us run the business (e.g. hosting providers, email/invoicing software, analytics tools)
• Authorities where required by law

Any third party we use is required to keep your data secure and only use it for the purpose we've specified.

6. How long we keep your information

• Enquiry details: deleted after 6 months if you don't become a client
• Client and financial records: kept for 7 years, in line with UK tax record-keeping requirements
• Marketing list: kept until you unsubscribe

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time (for marketing, for example)

To exercise any of these, email hello@thewebsitedepartment.co.uk.

8. Complaints

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the latest version.