Privacy notice | ExeWebWorks

Who I am

This site belongs to Patryk Stefanowski, trading as ExeWebWorks, a sole trader, at 14 Couch Field, Cranbrook, Exeter EX5 7JH. I decide how your details are used, so in data protection terms I am the controller. For anything about your details, email [email protected] or write to the address above.

What I collect

When you use the contact form: your name, your email address or phone number, your business and what you need, plus anything else you choose to write.
When you book a call: your name, your phone number and the time you pick, plus your business and what you would like to talk about if you add them.
When you email, call or message me: your contact details and whatever you send. WhatsApp messages are also handled by WhatsApp under its own privacy policy.
If you become a client: your contact and business details, what we agree, invoices and payments, and the words, photos and logins you give me to build and run your site.
When you use the free website check: the web address you type goes from your browser straight to Google PageSpeed Insights, which runs the test. I do not receive the address or the results unless you choose to send them to me through the contact form.
When you visit the site: like every website, the server that delivers it sees technical details such as your IP address and browser. There are no analytics or advertising trackers on this site.

Why I use it, and the legal basis

To reply to you and give you a price, and to ring you at the time you booked. You asked me to, which the law calls taking steps at your request before a contract.
To build and look after your website. That is the contract between us.
To keep accounts and records. HMRC requires it, a legal obligation.
To keep the forms free of spam and the site secure. My legitimate interest in a working, safe site.

I do not sell your details, add you to a mailing list, or use them for automated decisions about you.

Who else handles it

Cloudflare hosts this site, runs the contact form service, the call booking system (which keeps bookings in Cloudflare's database) and their spam check (Turnstile), and delivers messages and bookings to my inbox. Cloudflare is based in the United States and covers transfers from the UK under the UK Extension to the EU-US Data Privacy Framework, with standard contractual clauses as a fallback.
Google runs the free website check (PageSpeed Insights) if you use it. It receives the address you type and, like any website your browser contacts, your IP address, under Google's privacy policy.
My email provider stores the emails and form messages I receive.
My accountant and HMRC see invoice and payment records where the law requires.

The fonts on this site are served from the site itself, so loading a page does not send your details to Google or any other font service.

Storage on your device

This site sets no tracking or advertising cookies, so there is no cookie banner. It uses three small things, all allowed without consent:

Cloudflare Turnstile on the contact form and the booking page, a security check that tells people from spam bots.
A note in your browser's session storage so the logo animation plays once per visit and not on every page. It disappears when you close the tab.
Your price estimate or website check, if you build an estimate on the pricing page or run the check and choose to send it, kept in session storage just long enough to fill in the contact form. It is deleted as soon as it is used.

How long I keep it

Call bookings: deleted automatically six months after the call.
Enquiries that do not go ahead: deleted within 12 months.
Client records, invoices and contracts: six years after the end of the tax year they relate to, which covers HMRC's rules and the time limit for contract claims.
Logins and files for your site: for as long as I look after it, then handed to you or deleted.

Your rights

You can ask for a copy of the details I hold about you, ask me to correct them, delete them, limit how I use them, object to how I use them, or have them sent to you or someone else in a usable format. Email [email protected] and I will reply within one month. It costs nothing.

If you are unhappy with how I have handled your details, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.