This Privacy Policy explains how HER Business Websites ("we", "our", "us") collects and uses personal information when you visit this website, submit an enquiry, or engage us to design, build, host or care for a website. We are the data controller for the information we process about you and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This is a plain-English summary. It is issued in good faith but is not a substitute for legal advice — please raise anything unclear with us at hello@herbusinesswebsites.co.uk.
Information we collect
- Enquiry & Discovery data — details you provide through our Discovery form or by email, such as your name, business name, contact details, project goals, budget range and any files or links you share with us.
- Client account data — information required to deliver our services, including brand assets, copy, images, domain and hosting logins you choose to share, and correspondence.
- Billing data — invoicing details processed via our accounting tools; card details are handled directly by our payment providers and are not stored by us.
- Website usage data — limited technical information (IP address, device, browser, pages viewed) collected via cookies and analytics where enabled. See our Cookie Policy for detail.
How we use it
- To respond to enquiries and prepare proposals or quotations.
- To deliver the design, build, hosting and care services you engage us for.
- To invoice and keep required accounting records.
- To keep clients informed about their project, renewals and care plans.
- To improve the website and our services, and to keep them secure.
Lawful basis
We rely on the following lawful bases under UK GDPR:
- Contract — to take steps at your request before entering a contract and to perform the services agreed.
- Legitimate interests — to run and improve our business, respond to enquiries, and keep the site secure.
- Legal obligation — to keep accounting and tax records.
- Consent — where required, for optional analytics or marketing cookies.
Who we share it with
We use a small number of trusted processors to run our business. They only receive the data they need and are bound by contract to protect it:
- Hosting, database and file storage providers used to run this site and client sites.
- Email, calendar and support tools used to communicate with you.
- Accounting, invoicing and payment providers.
- Analytics providers, where enabled and consented to.
We do not sell your personal data.
International transfers
Some of our processors are located outside the UK. Where that is the case we rely on UK-approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Discovery / enquiry data: up to 24 months from last contact, unless you become a client.
- Client project and correspondence records: for the duration of the engagement and up to 7 years afterwards for tax and legal purposes.
- Website analytics: as configured in the analytics tool (typically up to 14 months).
Your rights
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete data we no longer need to keep.
- Restriction and objection — ask us to pause or stop certain processing.
- Portability — receive certain data in a portable format.
- Withdraw consent — where processing is based on consent.
To exercise any of these rights, email hello@herbusinesswebsites.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Security
We take appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls and regular backups of client sites we host.
Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of the page shows the latest revision.
Contact
For any privacy question or request, contact hello@herbusinesswebsites.co.uk.