This Privacy Policy explains how WebKatie ("we", "us", "our") collects, uses, and protects your personal data when you visit webkatie.com or engage us for design and development services. We are the "data controller" for the personal data you provide and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
WebKatie is a digital studio based in Windsor, Berkshire, United Kingdom. We are registered with the Information Commissioner's Office (ICO) as a data controller.
- Email: hello@webkatie.com
- Phone: 07949 044141
- Postal address: Windsor, Berkshire, UK (full address on request)
2. What data we collect
We only collect what we need to provide our services.
- Contact details you submit (name, email, phone, company, project info) via our contact, quote, or booking forms.
- Account & project data for clients (invoices, proposals, signed agreements, project files).
- Technical data (IP address, browser type, device, referring URL, pages viewed) collected automatically by analytics and our hosting infrastructure.
- Cookies & similar technologies — see Section 7.
3. How we use your data (lawful bases)
- Performance of a contract — to quote, deliver, invoice, and support your project.
- Legitimate interests — to respond to enquiries, prevent fraud, improve our website, and send service-related emails.
- Consent — for non-essential cookies and any marketing emails (you can withdraw consent at any time).
- Legal obligation — to keep accounting and tax records as required by HMRC.
4. Who we share data with
We never sell your data. We share it only with trusted processors who help us run the business:
- Hosting & infrastructure: Lovable, Supabase, Vercel/Cloudflare CDN.
- Email delivery: Resend (transactional email).
- Accounting: FreeAgent (invoicing, bookkeeping).
- Scheduling: Calendly (discovery calls).
- Analytics & advertising: Google Analytics 4, Google Ads (only with consent).
Some of these providers process data outside the UK. Where they do, we rely on UK-approved transfer mechanisms (Adequacy Regulations or the UK International Data Transfer Addendum).
5. How long we keep your data
- Enquiries that don't become projects: up to 24 months.
- Client records, contracts, invoices: 7 years (HMRC requirement).
- Analytics data: per Google Analytics retention (default 14 months).
- Marketing email subscribers: until you unsubscribe.
6. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, email hello@webkatie.com. We respond within one month. If you're unhappy with our response, you can complain to the Information Commissioner's Office (ICO).
7. Cookies
We use a small number of strictly necessary cookies (for the site to function) and, with your consent, analytics and advertising cookies. You can review or change your choices at any time via the cookie banner. See Google's cookies policy for more on Google Analytics and Google Ads cookies.
8. Security
We use TLS encryption in transit, encrypted databases at rest, role-based access controls, and Row Level Security on our backend. We carry £5m Employer's Liability and £5m Public Liability insurance covering professional services.
9. Children
Our services are aimed at businesses. We don't knowingly collect data from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified via our website or by email if you're a client.
11. Contact
Questions about this policy or your data: hello@webkatie.com.