Privacy Notice

Draft for review. This notice describes how this website currently works. Highlighted items must be completed by Webgital, and the notice should be reviewed by the business owner or a qualified adviser before launch.

Last updated: [date of publication]

Who we are

This website is operated by [legal entity name] ("Webgital", "we", "us"), [company number and registered office address]. We are the controller of personal information collected through this website.

For privacy questions or to exercise your rights, email [privacy contact email].

ICO registration number: [ICO registration number, if applicable].

Information we collect

When you submit the audit request form, we collect:

your name, business name and business email address;
your website address, if you provide it;
the service you're interested in and the description of your challenge;
whether you've chosen to receive marketing emails.

Our hosting provider also processes technical information such as IP addresses in server logs, which is needed to deliver the website securely and protect the form against abuse.

How and why we use it

To respond to your audit request and arrange a consultation. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
To keep the website secure, including spam and abuse prevention. Lawful basis: legitimate interests.
To send marketing emails, only if you tick the optional box. Lawful basis: consent, which you can withdraw at any time by using the unsubscribe link or emailing us.

Who we share it with

We use service providers who process data on our behalf under contract:

Website hosting: [hosting provider, e.g. Vercel Inc.]
Email delivery of form submissions: [email provider, e.g. Resend]
Web fonts: Google Fonts (Google LLC), which receives your IP address when your browser downloads our heading font. No cookies are set.

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework. [Confirm the safeguard used for each provider.]

We do not sell your personal information.

How long we keep it

We keep audit requests for [retention period, e.g. 12 months] from our last contact, unless you become a client, in which case it is kept in line with our client records policy. Marketing consent records are kept until you unsubscribe and for a short period afterwards to honour your request.

Your rights

Under UK data protection law you have the right to access, correct or delete your personal information, to object to or restrict certain processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us using the details above.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to resolve your concern first.

Cookies

See our cookies page for details. This website does not currently use analytics or advertising cookies. Our heading font is loaded from Google Fonts.

Changes to this notice

We'll update this notice if the way we handle personal information changes, for example if we add analytics. The date at the top shows when it was last revised.