Privacy Policy
Last updated: 25/08/2025
[Your Business Name] (“we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where applicable), and other relevant data protection laws.
1. Who We Are
‘Is That All?’ provides professional web design and related digital services. For the purposes of data protection law, we are the “data controller” of the personal information you provide to us.
Our contact details are:
‘Is That All?’
The Studio – 26 Wrose Grove
Wrose
Bradford
West Yorkshire
BD2 1PQ
Email: isthatalluk@gmail.com
2. What Information We Collect
We may collect and process the following personal data:
- Identity Data: Name, company name, job title.
- Contact Data: Email address, phone number, business address.
- Project Data: Information you provide about your website requirements.
- Technical Data: IP address, browser type, operating system, and browsing activity on our website.
- Marketing Preferences: Your consent to receive communications from us.
3. Lawful Basis for Processing
Under GDPR, we rely on the following lawful bases to process your personal data:
- Contract: To provide quotes, deliver web design services, and manage our business relationship.
- Consent: When you sign up for newsletters or marketing communications.
- Legal Obligation: Where processing is required to comply with UK or EU law.
- Legitimate Interests: To analyse website traffic, improve services, and protect against fraud.
4. How We Use Your Information
We may use your data to:
- Respond to enquiries and provide quotations
- Deliver and manage web design projects
- Send invoices, contracts, or service updates
- Improve website functionality and security
- Send marketing communications (if you have consented)
5. How We Share Your Data
We will never sell your personal information. We may share data only with:
- Service providers (e.g., hosting companies, email providers, analytics platforms) who process data on our behalf under strict confidentiality agreements
- Legal authorities if required by law or to protect our rights
All third parties are required to comply with GDPR and protect your data.
6. Data Retention
We will only keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations.
- Project-related data: Retained for up to 7 years (for tax and legal records).
- Enquiry/contact form data: Retained for 12 months unless you become a client.
- Marketing data: Retained until you withdraw consent.
7. International Data Transfers
If we use third-party services outside the UK or EU (e.g., cloud hosting or email platforms), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions approved by the UK/EU.
8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access – Request a copy of the data we hold about you.
- Right to Rectification – Ask us to correct inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”) – Request deletion of your data where legally applicable.
- Right to Restrict Processing – Limit how we process your data.
- Right to Data Portability – Request transfer of your data to another provider.
- Right to Object – Object to processing based on legitimate interests or for marketing purposes.
- Right to Withdraw Consent – Where processing is based on consent, you may withdraw at any time.
To exercise your rights, please contact us at: [Your Email Address].
9. Cookies
Our website uses cookies to enhance your browsing experience and track usage analytics. You can disable cookies via your browser settings. For more details, please see our [Cookie Policy] (if applicable).
10. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK, or your local EU data protection authority.
ICO Website: https://ico.org.uk
11. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated “last modified” date.
