Privacy Policy

1. Introduction

Cushty Websites ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cushtywebsites.com or use our web design services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website and services, you agree to the collection and use of information in accordance with this policy.

Data Controller: Cushty Websites
Contact: [email protected]

2. Information We Collect

2.1 Personal Information You Provide

We may collect the following personal information when you:

• Fill out contact forms or quote requests
• Subscribe to our newsletter
• Create an account or purchase our services
• Communicate with us via email or phone

This information may include:

• Name and business name
• Email address
• Phone number
• Business address
• Payment information (processed securely through third-party payment processors)
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visits

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand where our visitors are coming from. You can control cookies through your browser settings. For more information, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our web design services
• Communication: To respond to your enquiries, send quotes, and provide customer support
• Marketing: To send you promotional materials, newsletters, and updates (with your consent)
• Payment Processing: To process transactions and send billing information
• Legal Compliance: To comply with legal obligations and protect our rights
• Analytics: To analyse website usage and improve user experience
• Security: To detect, prevent, and address technical issues and fraudulent activity

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)
• Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (e.g., payment processors, hosting providers, email services). These providers are contractually obligated to keep your information confidential.
• Legal Requirements: Law enforcement, regulatory authorities, or other third parties when required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the new owner

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymise it.

Typically, we retain customer data for 7 years after the last transaction for accounting and legal purposes, and marketing data until you withdraw consent.

7. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time
• Right to Lodge a Complaint: You can complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure password-protected systems
• Regular security assessments
• Limited access to personal data by authorised personnel only

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities, to protect your information in accordance with UK data protection standards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Complaints to the ICO

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.