Privacy Policy
How this website collects, uses and protects personal data, and what rights you have over it.
Last updated:
1. Who is responsible for your data
The data controller for this website is Thomas Gere, operating as a sole trader based in the United Kingdom, under the trading name MyWebMarketing.
Contact regarding this policy or any data protection matter should be made through the contact form, selecting a data protection subject.
2. Which law applies
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) as incorporated into UK law, and the Data Protection Act 2018. Where a visitor is located in the European Economic Area, the equivalent provisions of Regulation (EU) 2016/679 (EU GDPR) are applied to that visitor's data.
3. What data is collected
Data you provide voluntarily
When you submit an enquiry through a form on this site, the following are collected: your name, your email address, and optionally your company name, your website address, the subject category you select, and the content of your message. Where you submit a pricing configuration, the selected modules and calculated total are included.
No other form of contact detail is required and none is requested.
Data collected automatically
This site uses a privacy-focused analytics service that records page views, referring sources, approximate country-level location, device type and browser. It does not set advertising cookies, does not create a cross-site profile of you, and does not require a consent banner because it does not store identifiers on your device for that purpose.
Standard server logs are retained by the hosting provider for security and diagnostic purposes and include IP addresses. These are not used to identify individual visitors.
Cookies
This site does not use advertising or tracking cookies. Where local storage is used, it is limited to remembering your language preference so you are not asked repeatedly. That preference stays on your device and is never transmitted.
4. Why the data is used, and the legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to your enquiry | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) | 24 months from last contact |
| Delivering a project you have commissioned | Performance of a contract (Art. 6(1)(b)) | Duration of the engagement plus 6 years for accounting purposes |
| Site analytics and improvement | Legitimate interests (Art. 6(1)(f)) in understanding how the site performs | Aggregated, retained up to 24 months |
| Security, fraud and abuse prevention | Legitimate interests (Art. 6(1)(f)) | Server logs, up to 12 months |
| Meeting statutory accounting obligations | Legal obligation (Art. 6(1)(c)) | 6 years, as required by UK law |
Your data is never sold, rented or traded. It is not used for automated decision-making or profiling that produces legal or similarly significant effects.
5. Who else processes your data
A small number of service providers process data on this site's behalf, each under a data processing agreement:
- Hosting and content delivery — serving the site and retaining security logs.
- Form delivery service — transmitting form submissions to the studio's inbox.
- Analytics provider — aggregated, cookieless usage statistics.
- Email provider — handling correspondence with you.
Some of these providers are located outside the United Kingdom. Where personal data is transferred internationally, that transfer is covered by an adequacy decision or by Standard Contractual Clauses together with the UK International Data Transfer Addendum.
6. Your rights
Under the UK GDPR you have the right to:
- be told what personal data is held about you, and receive a copy of it;
- have inaccurate data corrected;
- have your data erased where there is no continuing lawful reason to keep it;
- restrict how your data is processed while a concern is investigated;
- receive your data in a portable, machine-readable format;
- object to processing carried out on the basis of legitimate interests;
- withdraw consent at any time, where consent was the basis for processing.
Requests are answered within one month. There is no charge unless a request is manifestly unfounded or excessive.
7. Complaints
If you believe your data has been handled improperly, please raise it directly first — most issues are resolved quickly. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk. If you are in the EEA, you may complain to the supervisory authority in your country of residence.
8. Security
The site is served exclusively over HTTPS with a valid certificate and strict transport security. Content security, frame protection and referrer policies are enforced at the header level. Form submissions are transmitted over an encrypted connection and protected against automated abuse. Access to submitted enquiries is limited to the studio principal.
No system is perfectly secure. In the event of a breach likely to result in a risk to your rights and freedoms, affected individuals and the ICO are notified within the statutory seventy-two hour period.
9. Children
This site offers services to businesses and is not directed at children. Personal data from anyone under sixteen is not knowingly collected. If you believe a child has submitted data through this site, please make contact and it will be deleted.
10. Changes to this policy
This policy may be updated as the services or the applicable law change. The date at the top of the page reflects the most recent revision. Material changes affecting how existing client data is handled are communicated directly.