Privacy Policy — Websites Done Diff

Quick summary

We only collect the personal information you choose to give us — mainly your name, email address, phone number and the contents of any message you send us.
We use it to reply to your enquiry and, if you become a client, to deliver our services and meet our legal obligations.
We don't sell or rent your information, and this website doesn't use tracking or analytics cookies.
Fonts on this site are loaded from Google's servers, which involves sharing your device's IP address with Google — see "Cookies and similar technologies" below.
You can ask us to access, correct or delete your information at any time — see "Your rights" below.

1. Who we are

This website is operated by Websites Done Diff, a web design partnership run by Joe and Lucas, based in the Vale of Glamorgan, South Wales. For the purposes of UK GDPR, Websites Done Diff is the "data controller" of the personal information described in this policy.

Add your registered business name, structure (e.g. sole trader / partnership / limited company), company number (if any), and business address here before publishing.

2. The information we collect

We only collect personal information that you choose to give us. Depending on how you contact us, this may include:

your name;
your email address;
your telephone number, if you call or text us or leave it in a message;
the contents of any message, enquiry or brief you send us, including anything you tell us about your business; and
basic technical information sent automatically by your browser when it loads this website, such as your IP address and browser type (see section 6).

We don't collect payment card details, ask you to create an account, or knowingly collect any "special category" data (such as health or financial information) through this website.

3. How we collect your information

We collect personal information directly from you, when you:

fill in the contact form on this website, which opens a pre-filled email in your own email application for you to review and send to us;
email us directly at WebsitesDoneDiff@gmail.com;
call or text either of us on the numbers listed on this website; or
get in touch with us in person, or through any other channel, such as social media.

This website's contact form does not submit your details to a server or database of ours. It simply prepares an email in your own email application, addressed to us — nothing is sent to us unless you choose to send that email yourself.

4. How we use your information, and our lawful basis for doing so

UK GDPR requires us to have a valid "lawful basis" for each way we use your personal information. The table below sets out what we use your information for and which lawful basis we rely on.

What we use it for	Our lawful basis
Responding to enquiries sent via our contact form, email, phone or in person	Legitimate interests — responding to people who contact us about our services. Where you're asking about a specific project, we also rely on taking steps at your request before entering into a contract.
Providing web design, redesign and website update services to clients	Performance of a contract with you
Keeping business records, such as invoices and client correspondence	Legal obligation (UK tax and accounting rules) and legitimate interests in keeping accurate records
Operating this website, including loading web fonts so pages display correctly	Legitimate interests in presenting a well-designed, properly functioning website

We don't use your information for automated decision-making or profiling, and we don't use it for marketing unless you separately ask us to keep you updated, in which case we'll only do so with your consent and you can opt out at any time.

5. Who we share your information with

We don't sell, rent or trade your personal information. We may share it with:

Google — we use a Gmail address (WebsitesDoneDiff@gmail.com) to receive enquiries, so any email you send us is processed and stored by Google as part of running that mailbox;
Google Fonts — this website loads typefaces directly from Google's servers (see section 6);
professional advisers, such as an accountant, where reasonably necessary for our business; and
a relevant authority, if we're required to disclose information by law.

We do not use any other third-party analytics, advertising or tracking services on this website.

6. Cookies and similar technologies

This website does not set any tracking, analytics or advertising cookies, and no cookie consent banner is currently needed because we don't use any non-essential cookies.

The site does load web fonts directly from Google (fonts.googleapis.com and fonts.gstatic.com) so that text displays correctly. When your browser requests these files, your IP address and basic browser information is sent to Google as the operator of those servers. This is a standard, low-risk technical requirement of loading custom fonts, rather than something we use to track you individually. You can read more in Google's Privacy Policy.

If we introduce analytics, cookies or similar technologies in future (for example, to understand which pages are popular), we'll update this policy and add a cookie banner where required, in line with the Privacy and Electronic Communications Regulations (PECR).

7. International transfers

Some of the third parties listed above, including Google, are based in or operate servers outside the UK, including in the United States. Where your personal information is transferred outside the UK, we expect those providers to have appropriate safeguards in place, such as the UK's international data transfer provisions or the provider's own certified transfer mechanisms. You can find more detail in Google's own privacy and data transfer documentation.

8. How long we keep your information

We don't keep personal information for longer than we need it. As a guide:

if you make an enquiry that doesn't lead to us working together, we'll keep that correspondence for up to 24 months from our last contact with you, so we can follow it up and for our own records, then delete it;
if you become a client, we'll keep your contact details and project correspondence for the length of our working relationship and for up to 6 years afterwards, to meet UK tax, accounting and contractual obligations; and
if you ask us to delete your information sooner, we will, unless we're legally required to keep it (see "Your rights" below).

These are example retention periods — please confirm they match how you actually handle enquiries and client records before publishing.

9. Keeping your information secure

This website has no database or server-side storage of its own for the contact form — enquiries only reach us if you send an email through your own email application. Where we do hold personal information (for example, in our email inbox or client records), we take reasonable technical and organisational steps to protect it, such as using reputable, secured email and file storage providers and limiting access to the two of us.

No method of transmission over the internet is completely secure, so while we do our best to protect your personal information, we can't guarantee its absolute security.

10. Your rights

Under UK GDPR, you have the right to:

be informed about how we use your personal information (which is what this policy is for);
access a copy of the personal information we hold about you;
rectification — ask us to correct inaccurate or incomplete information;
erasure — ask us to delete your information, where we don't have a legal reason to keep it;
restrict how we use your information in certain circumstances;
object to us using your information where we rely on legitimate interests;
data portability — ask for your information in a portable format, where relevant; and
withdraw consent at any time, where we rely on consent (such as marketing updates).

We don't make any decisions about you using solely automated means, so automated decision-making rights don't apply to how we currently use your information.

To exercise any of these rights, just contact us using the details in section 13. We'll usually respond within one month.

11. Children's privacy

This website and our services are aimed at business owners and are not directed at children. We don't knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time, for example if we start using new tools or services on this website. We'll update the "Last updated" date at the top of this page whenever we make changes, and we'd encourage you to check back occasionally.

13. Contact us

If you have any questions about this policy or how we handle your personal information, please get in touch:

14. How to complain

We hope we can resolve any concerns you have about how we use your personal information — please contact us first using the details above.

If you're not satisfied with our response, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF