Privacy Policy

1. Who we are

This privacy policy explains how Thrifty Web Design ("we", "us", "our") collects and uses your personal data when you use our website thriftywebdesign.co.uk or otherwise interact with us.

Thrifty Web Design is a trading name of Matthew Picken, operating as a sole trader.

• Data controller: Matthew Picken, trading as Thrifty Web Design
• Correspondence address: 23 Warren Place, Walsall, WS8 6BY
• Contact: matt@thriftywebdesign.co.uk

We are the "controller" of your personal data, meaning we decide how and why it is processed.

2. The personal data we collect

We may collect and process the following:

• Identity and contact data - name, email address, phone number, and (where relevant) business and postal address.
• Transaction data - details of services purchased and our invoice/payment records.
• Technical data - IP address, browser type and version, and device information (e.g. from our hosting provider's server logs).
• Communications data - the content of enquiries, messages, and feedback you send us.
• Marketing data - your preferences in receiving marketing from us.

3. How we collect your data

• Directly from you - when you fill in our contact form, email or call us, or engage us for work.
• Automatically - limited technical data such as server logs when you visit our site (see our Cookie Policy).

4. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for each use of your data:

Purpose	Lawful basis
To provide the web design services you request	Performance of a contract
To respond to enquiries and quote for work	Legitimate interests / steps prior to a contract
To raise invoices and keep payment records	Performance of a contract / Legal obligation
To send marketing communications	Consent (you can withdraw at any time)
To improve our website and services	Legitimate interests
To comply with legal and regulatory obligations	Legal obligation

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights.

5. Marketing

We will only send you marketing communications where you have consented, or where permitted by law (e.g. to existing clients about similar services under the "soft opt-in"). You can opt out at any time using the unsubscribe link in any email, or by contacting us at matt@thriftywebdesign.co.uk.

6. Who we share your data with

We may share your data with:

• Service providers (processors) acting on our behalf - our website hosting provider (Hostinger) and our contact-form delivery service (Web3Forms).
• Professional advisers - our accountant, and lawyers or insurers where necessary.
• Authorities - where required by law.

We require all processors to safeguard your data under a written contract. We do not sell your personal data. As we invoice for our work and are paid by bank transfer, we do not process or store your card details.

7. International transfers

Some of our providers - such as our contact-form delivery service (Web3Forms) - may process data outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries with UK "adequacy" status.

8. How long we keep your data

We keep personal data only as long as necessary for the purposes set out above, including legal, accounting, and reporting requirements.

• Enquiries that don't lead to work: 24 months
• Invoice and transaction records: 6 years (HMRC requirement)
• Marketing consent: until you withdraw consent

When no longer needed, data is securely deleted or anonymised.

9. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and secure hosting. No transmission over the internet is fully secure, but we take reasonable steps to protect your information.

10. Your rights

Under UK GDPR you have the right to:

• Access a copy of your data;
• Rectification of inaccurate or incomplete data;
• Erasure ("right to be forgotten") in certain circumstances;
• Restriction of processing;
• Object to processing based on legitimate interests or for direct marketing;
• Data portability;
• Withdraw consent at any time, where processing is based on consent;
• Not be subject to solely automated decisions with legal or similarly significant effects.

To exercise any right, contact us at matt@thriftywebdesign.co.uk. We will respond within one month. There is normally no charge.

11. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

12. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for full details.

13. Complaints

If you have a concern about how we handle your data, please contact us first at matt@thriftywebdesign.co.uk so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

14. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Material changes will be notified by a notice on our website.