Who we are (Data Controller)
Michael Wassell Web Design
United Kingdom
Email: privacy@mwwebdesign.co.uk
Quick summary
- We do not maintain a customer database for marketing.
- Website enquiry forms are sent straight to our business email. We periodically delete enquiry emails if they don’t become an active project.
- No cookies are set other than those strictly necessary for the site to function. We do not use analytics cookies.
What personal data we collect
We only collect the minimum information required to respond to your enquiry:
- Contact form: your name, email address, optional phone number, and any information you include in the message.
- Server logs (automatic): basic technical data provided by your browser such as IP address, date/time, and pages requested (used for security and troubleshooting).
- Cookies: none beyond strictly necessary cookies (if any) that keep the site working. No analytics or tracking cookies.
Why we use your data (lawful bases)
We process data for these purposes and lawful bases under UK GDPR:
- Responding to enquiries: to provide information you request and discuss potential work — legitimate interests and/or steps prior to entering a contract (Article 6(1)(f)/(b)).
- Running and securing the website: to protect our services and troubleshoot issues — legitimate interests (Article 6(1)(f)).
- If you become a client: to deliver the contract and keep required business records — contract and legal obligation (Article 6(1)(b)/(c)).
How we use and share your data
- Enquiry form submissions are sent directly to our business email inbox hosted with our UK provider. We do not add you to any mailing list.
- We may use trusted service providers (e.g. web hosting, email, backup) to operate this website. They act under written agreements and only process data as instructed.
- We do not sell your personal data.
- We only disclose data when legally required (for example, to comply with law or respond to lawful requests).
How long we keep your data
| Data | Typical retention | Reason |
|---|---|---|
| Enquiry emails (no ongoing discussion) | Deleted within 30 days via a periodic clean-up | Keep only what we need to respond; minimise data. |
| Enquiries that lead to a project | For the duration of the project and then as required for records (typically up to 6 years for tax/accounting) | Contract performance and legal obligations. |
| Server logs | Short period, typically up to 30 days unless investigating security issues | Security and troubleshooting. |
Your rights (UK GDPR)
You have the right to:
- access a copy of your personal data;
- ask us to correct inaccuracies;
- ask us to erase your data (where applicable);
- restrict or object to our processing (including where we rely on legitimate interests);
- data portability (for information you provided and we process by automated means);
- withdraw consent where we rely on consent (we do not generally rely on consent for enquiries);
- complain to the Information Commissioner's Office (ICO).
To exercise your rights, email privacy@mwwebdesign.co.uk with the subject line Privacy Request.
International transfers
We aim to keep your data in the UK/EEA. If a provider stores or accesses data from outside the UK/EEA, we will ensure appropriate safeguards are in place (for example, UK-approved standard contractual clauses).
How we protect your data
- TLS/HTTPS for data in transit.
- Limited mailbox access and periodic deletion of old enquiries.
- Use of reputable hosting and email providers.
Changes to this notice
We may update this Privacy Policy from time to time. The Last updated date at the top will change, and significant changes will be highlighted on this page.
Contact
If you have questions about this policy or your data, contact us at privacy@mwwebdesign.co.uk.
Legal basis & responsibility
For enquiries, we are the data controller. Where we host websites for clients, we generally act as a data processor on the client's instructions. In those cases, we process personal data only as necessary to provide hosting and support services.
Plain-language version
You send us a message. It lands in our inbox. If we don’t start a project, we delete the message after about 30 days. We don’t track you around the web, and we won’t sell your details.