1. Who is responsible
Web Builder uses personal information to handle enquiries, manage client relationships and provide its services. B L Notts Holdings Ltd, trading as Web Builder (company number 16782785), is the controller for those activities. See our company details. Contact: hello@webbuilderagency.co.uk.
This notice covers webbuilderagency.com and our own business administration. Where we process personal data for a client’s website under their instructions, the client’s privacy notice and our separate data processing agreement apply to that work.
2. Information we use
- Enquiries: your name, business, email address, contact details and the information you choose to send about a project.
- Client records: proposals, instructions, correspondence, approvals, billing details and payment records. This website does not collect card details or process payments.
- Technical information: hosting and security services may process IP addresses, device and browser information, requested pages, dates, times and error or security logs to deliver and protect the website.
- Display preferences: the site can remember your chosen light or dark theme on your device if you enable it. It also records your choice about remembering the theme for up to 180 days. See our cookie policy and preference control.
The contact buttons open your email application. We receive an enquiry only when you send it. The page code does not contain an enquiry database, advertising pixels, analytics tags, session recording or newsletter tracking.
We normally receive information from you, your authorised colleagues and the service providers involved in your project. Please do not include passwords, sensitive personal data or customer databases in a first enquiry.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Respond to enquiries and prepare an individual’s requested quote | Steps towards a contract at your request; legitimate interests in responding to business contacts where the prospective customer is an organisation |
| Deliver work, manage approvals and communicate with clients | Contract where you are the individual client; legitimate interests in providing services and maintaining a business relationship for organisational contacts |
| Keep invoices, accounts and required records | Legal obligation, and legitimate interests in accurate administration where not legally required |
| Protect systems, investigate misuse and handle complaints or legal claims | Legitimate interests in security and defending or resolving claims; legal obligation where applicable |
We consider the impact on individuals when relying on legitimate interests. We do not sell personal information or use this site for solely automated decisions producing legal or similarly significant effects. If we introduce a new purpose requiring consent, we will explain it and obtain consent before doing so. Sending an enquiry is not consent to unrelated marketing.
5. How long information is kept
Our intended retention periods are set out below. Retention also depends on legal requirements and any need to resolve a dispute.
- Enquiries that do not become a project: normally up to 12 months after the last meaningful contact, then deletion unless there is a documented reason to retain them.
- Contract and financial records: normally six years after the relevant contract ends or accounting period, as appropriate, with a longer period only where required by law or necessary for a live dispute.
- Project access and client data: removed or returned when no longer needed, in accordance with the agreed handover and data processing terms.
- Hosting and security logs: kept for the provider’s documented operational and security period; incident records may be retained while needed to investigate or resolve a claim.
- Theme choice: up to 180 days from the last saved choice. A record of your choice not to remember the theme remains until you change it or clear site storage.
We review retained information and limit access. Legal holds may delay deletion of information relevant to an actual dispute or legal obligation.
6. Security
We use measures proportionate to the information and risks, such as access controls, secure transfer methods and limiting who can view project information. No internet service is entirely risk-free. If a personal data breach occurs, we assess it, take appropriate action and notify the relevant people or regulator where the law requires. Our terms do not remove these duties.
7. Your rights and complaints
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. You can object to direct marketing at any time. Where processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal.
These rights have conditions and exceptions. Contact hello@webbuilderagency.co.uk. We may ask for proportionate information to verify identity. We normally respond within one month; if the law permits extra time, we explain why. Requests are normally free.
You can complain to the Information Commissioner’s Office. You do not have to complain to us first, although we welcome the opportunity to resolve a concern.
Providing enquiry information is voluntary. Without the information needed to respond or fulfil a contract, we may be unable to provide that service. This website is intended for business customers, not services directed at children.
8. Changes and other websites
We update this notice when our practices change and explain material new uses before they begin. The date above shows when this notice was last updated. Linked portfolio websites operate under their own privacy notices; visiting them takes you away from this website.