Privacy Policy

This Privacy Policy explains how WebFuZsion ("we", "us") collects, uses and protects personal information when you visit webfuzsion.co.uk, contact us, or use our web design services. We handle your information in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

WebFuZsion is a web design business run by Steve. Our contact address is Unit 9 Chandlers Yard, Greyfriars, Grantham, NG31 6PG, UK. We are the "data controller" for the personal information described in this policy, and we pay the data protection fee to the Information Commissioner's Office (ICO).

Where we host or manage a client's website or data on that client's behalf, the client is the controller of that data and we act as their processor, under their instructions.

2. Information We Collect and Why

2.1 When you contact us

If you use our contact form or email us, we collect your name, email address, phone number (optional), subject and message. We use this to reply to you and to discuss or quote for a project. Our lawful basis is legitimate interests (responding to enquiries you have made) and, where you ask for a quote, steps taken at your request before entering into a contract.

2.2 When you become a customer

We hold your name, business name, contact details, project details, and invoicing and payment records. We use these to deliver and support your website and to keep accounts. Our lawful bases are contract and legal obligation (tax and accounting records).

2.3 Email updates

We may email our customers and people who have enquired about our services with blog posts and news about web design and our services. Every email includes a way to unsubscribe, and we stop emailing you when you ask. You can also ask us at any time at the address below. Our lawful basis is legitimate interests, and consent where the law requires it.

2.4 Website usage (only with your consent)

If you accept analytics cookies in our cookie banner, we collect information about how you use the site: pages visited, page titles, referring website, campaign (UTM) tags, browser and device details (including user agent and screen size), an anonymous session ID, IP address, and blog reading behaviour such as scroll depth and shares. We use this to understand which content is useful and to improve the site. Our lawful basis is your consent, which you can withdraw at any time (see section 4).

If you choose "necessary only", none of this analytics data is collected.

2.5 Security and spam protection

Our contact form uses Google reCAPTCHA to prevent spam and abuse. reCAPTCHA collects hardware and software information and your IP address, and sends it to Google. Our lawful basis is legitimate interests (keeping the site and form secure).

3. Who We Share Information With

We do not sell your personal information. We use the following service providers, who process information on our behalf or for the purposes described:

• Vercel: website hosting.
• Supabase: database for customer records, enquiries, mailing list and (with consent) site analytics.
• Google: email (Gmail), reCAPTCHA, and Google Analytics (only if you accept analytics cookies).
• Ahrefs: website analytics (only if you accept analytics cookies).

We may also share information where required by law, for example with HMRC or in response to a lawful request.

4. Cookies

When you first visit, our cookie banner lets you accept all cookies, accept necessary cookies only, or choose preferences. Analytics tools (Google Analytics, Ahrefs and our own analytics) do not load or collect anything until you accept analytics cookies.

• Necessary: a cookie that remembers your cookie choice (cookie-consent, kept for 12 months), and security features such as reCAPTCHA.
• Analytics: Google Analytics, Ahrefs Web Analytics and our own first-party analytics, only with your consent.

You can change your choice at any time using the "Cookie settings" link in the website footer, and you can also delete cookies in your browser settings. After you withdraw consent, analytics scripts will not load on later visits, and cookies already set by Google can be cleared in your browser.

5. International Transfers

Some of our providers (including Google, Vercel and Supabase) may process information outside the UK, including in the United States. Where this happens, we rely on UK-approved safeguards such as the UK-US data bridge or the providers' standard contractual clauses (the UK International Data Transfer Addendum).

6. How Long We Keep Information

• Enquiries that do not lead to work: up to 2 years, then deleted.
• Customer and invoice records: 6 years after the end of the financial year they relate to, as required for tax and accounting.
• Email updates: until you unsubscribe or ask us to stop. We then keep only a record that you opted out, so that we do not email you again.
• Site analytics data (with consent): up to 26 months.
• Cookie consent cookie: 12 months.

7. Data Security

We protect personal information with measures that include encrypted connections (HTTPS), access controls and authentication on our admin systems and database, and keeping our software up to date. No method of transmission or storage is completely secure, but we work to keep your information safe.

8. Your Rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased, in certain circumstances;
• restrict or object to our processing, including to marketing emails at any time;
• data portability, in certain circumstances; and
• withdraw consent at any time, where we rely on consent.

To use these rights, email us at the address below. We will normally reply within one month.

9. Children

Our website and services are aimed at businesses and are not intended for children under 16. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy from time to time. The latest version is always on this page, with the "last updated" date at the top.

11. Contact Us and Complaints

If you have a question or request about your personal information, contact us:

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the chance to resolve it with you first.