// legal/privacy-policy.md

Privacy Policy

Last updated: 29 August 2026

1. Introduction

Westcode Websites ("we", "us", "our") is a trading name of SW Website Consulting Ltd, a software solutions company registered in England and Wales, based in Cornwall, UK. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect the following types of personal data: • Contact details: name, email address, phone number, and business name when you submit an enquiry via our chat bot, contact form, or email us directly. • Technical data: IP address, browser type, device information, pages visited, and referring website addresses. This is collected automatically through our web traffic tracking system. • Project details: information you provide about your business requirements, project scope, and objectives when discussing potential work with us.

3. How We Use Your Data

We use your personal data to: • Respond to your enquiries and provide information about our services. • Manage customer relationships, orders, and invoicing through our internal CRM system. • Analyse website traffic to improve user experience and optimise our site content. • Send you relevant communications about your project or service, where you have consented to this. • Comply with our legal and regulatory obligations.

4. Legal Basis for Processing

We process your personal data under the following lawful bases: • Consent: when you voluntarily submit your details via our chat bot or contact form. • Contractual necessity: when processing data is required to deliver services you have commissioned. • Legitimate interests: for website analytics and improving our services, provided this does not override your privacy rights. • Legal obligation: where we are required to retain records for tax or regulatory purposes.

5. Data Sharing

We do not sell your personal data. We may share it with trusted third-party service providers who help us operate our business (such as hosting providers and email platforms), but only where they have agreed to process data securely and in accordance with UK GDPR. We will never disclose your data to any party for marketing purposes without your explicit consent.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Customer order and invoicing records are typically retained for six years from the end of the financial year in which the transaction occurred, in line with HMRC requirements. Enquiry data from potential clients who do not proceed is retained for up to 24 months and then deleted.

7. Your Rights

Under UK GDPR, you have the right to: • Access the personal data we hold about you. • Request correction of inaccurate or incomplete data. • Request erasure of your personal data ("right to be forgotten"). • Restrict or object to the processing of your data. • Request data portability. • Withdraw consent at any time, where processing is based on consent. To exercise any of these rights, please contact us at hello@westcodewebsites.co.uk.

8. Cookies

Our website uses essential cookies to ensure basic functionality works correctly. We do not use third-party tracking cookies for advertising. Web traffic analytics are collected through our own first-party tracking system, which records page visits and referral sources without setting persistent advertising cookies on your device.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted data transmission (TLS/SSL), secure cloud infrastructure, and access controls limiting data visibility to authorised team members only.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: Westcode Websites (a trading name of SW Website Consulting Ltd) Email: hello@westcodewebsites.co.uk Phone: 01208 000 000 We aim to respond to all privacy enquiries within 30 days.