Privacy Notice

Last updated: 26 September 2026

Webb Design respects your privacy and is committed to protecting your personal information.

This Privacy Notice explains how we collect, use, store and protect personal information when you visit webbdesign.co.uk, contact us, request a quotation, become a client or use any of our website design, development, hosting, maintenance or related services.

This notice is intended to comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable privacy and electronic communications legislation.

1. Who we are

Webb Design is a UK web design and digital services business providing services including:

• WordPress website design and development;
• website redesigns;
• search engine optimisation (SEO);
• WooCommerce and eCommerce development;
• website hosting and domain-related services;
• website maintenance;
• website support;
• website performance and optimisation services; and
• related digital and technical services.

Trading name: Webb Design
Legal entity / proprietor: OK LETS GO LTD
Business address: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Company number, if applicable: 17503740
Website: webbdesign.co.uk
Email: info@webbdesign.co.uk

For the purposes of UK data protection law, Webb Design is normally the data controller for personal information collected through our website and in connection with our own business activities.

In some circumstances, particularly when working on a client’s website or systems, we may process personal information on behalf of that client. In those circumstances, the client may be the data controller and Webb Design may act as a data processor.

2. Personal information we may collect

Depending on how you interact with us, we may collect:

Contact information

This may include:

• your name;
• business or organisation name;
• email address;
• telephone number;
• postal or business address; and
• other contact information you voluntarily provide.

Enquiry information

When you submit our contact form, email us or otherwise contact us, we may collect:

• details of your enquiry;
• information about the project or service you require;
• your budget or requirements where supplied;
• website addresses;
• existing hosting or domain information;
• attachments or documents you choose to provide; and
• correspondence between you and Webb Design.

Client and project information

If you become a client, we may process information necessary to deliver your project, including:

• project requirements;
• website content;
• business information;
• branding assets;
• website administrator details;
• hosting account information;
• domain account information;
• technical configuration information;
• login credentials supplied for the purpose of completing agreed work;
• support requests;
• project correspondence;
• invoices;
• payment records; and
• contractual information.

Where login credentials are supplied to us, they will only be used as necessary to provide the requested service. Clients are encouraged to provide dedicated user accounts wherever possible and to change sensitive passwords once access is no longer required.

3. Information collected automatically

When you visit our website, certain technical information may be collected automatically by our website, hosting provider and security or analytics services.

This can include:

• IP address;
• browser type;
• operating system;
• device type;
• approximate location based on IP address;
• pages visited;
• referring website;
• date and time of visits;
• website interaction information;
• server logs; and
• information necessary to detect errors, malicious activity or security threats.

We use this information for website operation, security, troubleshooting, performance monitoring and, where appropriate consent has been obtained, analytics.

4. Contact forms

Our website may contain forms that allow you to contact Webb Design.

When you submit a form, information you provide may be sent to us by email and may also be temporarily processed by the website or hosting infrastructure.

Our forms may use security measures including validation, anti-spam techniques, honeypots and simple verification questions in order to reduce automated or malicious submissions.

We use the information submitted through a contact form solely for legitimate business purposes, such as responding to your enquiry, providing quotations or discussing services.

Submitting a contact form does not automatically subscribe you to marketing communications.

5. How we use your personal information

We may use personal information to:

• respond to enquiries;
• provide quotations;
• discuss potential projects;
• enter into and administer contracts;
• design, develop and maintain websites;
• provide hosting or technical services;
• provide customer and technical support;
• manage client projects;
• communicate about ongoing work;
• issue invoices and process payments;
• maintain financial and tax records;
• manage our business;
• maintain website and system security;
• prevent fraud, abuse and spam;
• analyse and improve our website;
• comply with legal and regulatory obligations;
• establish, exercise or defend legal claims; and
• send marketing communications where permitted by law.

We will not sell your personal information.

6. Our lawful bases for processing

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we rely on one or more of the following.

Contract

We may process information where it is necessary to:

• provide a quotation you have requested;
• take steps before entering into a contract;
• provide services under an agreed contract;
• administer your project; or
• provide support or maintenance.

Legitimate interests

We may process information where this is necessary for our legitimate business interests and those interests are not overridden by your rights.

This may include:

• responding to business enquiries;
• managing client relationships;
• protecting our systems;
• preventing fraud and spam;
• improving our services;
• maintaining records;
• recovering unpaid amounts; and
• operating and protecting our business.

Legal obligation

We may process information where necessary to comply with a legal obligation, including accounting, taxation and regulatory requirements.

Consent

Where the law requires consent, such as for certain analytics, advertising or marketing technologies, we will ask for your consent.

You can withdraw consent at any time.

Withdrawal of consent does not affect processing which occurred lawfully before consent was withdrawn.

7. Cookies and similar technologies

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information stored on your device when you visit a website.

We may use the following types of cookies.

Strictly necessary cookies

These are required for essential website functionality, security or operation.

They may include cookies used for:

• security;
• session management;
• fraud prevention;
• form functionality;
• cookie preference storage; and
• website administration.

Where legally permitted, strictly necessary cookies do not require prior consent.

Analytics cookies

Where enabled and where you have consented, we may use analytics tools such as Google Analytics to understand how visitors use our website.

Analytics information may include pages visited, approximate location, device information, visit duration and interactions with the website.

Functional cookies

These may enable optional website functionality or remember preferences.

Third-party cookies

Some third-party services integrated into our website may place their own cookies or use similar technologies.

We will not intentionally activate non-essential cookies before obtaining consent where consent is required by law.

You can change your cookie preferences using the cookie controls provided on our website or through your browser settings.

Disabling some cookies may affect certain website functions.

8. Google services

We may use Google services in connection with our website, including services configured through Google Site Kit.

Depending on which services are enabled, these may include:

• Google Analytics;
• Google Search Console;
• Google PageSpeed Insights; and
• other Google website tools.

Google Search Console and PageSpeed data may be used for website administration and performance purposes.

Where Google Analytics or another service stores or accesses information on your device for non-essential purposes, it will only be activated where the appropriate consent has been obtained.

Google processes information in accordance with its own privacy terms and policies.

9. Hosting and server logs

Our website and client websites may be operated using third-party website hosting providers.

Hosting infrastructure may automatically generate technical logs containing information such as:

• IP addresses;
• access dates and times;
• requested pages;
• error information;
• browser information; and
• security events.

These records may be retained for security, troubleshooting, server management and fraud-prevention purposes.

10. Client websites and personal information

When Webb Design works on a client’s website, we may occasionally have technical access to information stored within that website.

Depending on the website, this could include:

• customer information;
• website-user accounts;
• contact-form submissions;
• WooCommerce orders;
• email addresses; or
• other personal information controlled by the client.

We will only access such information where reasonably necessary to perform the services requested.

Where Webb Design processes personal information on behalf of a client, we will process that information in accordance with the client’s instructions and applicable data protection law.

Clients remain responsible for ensuring that their own websites, privacy notices, cookie mechanisms and business activities meet their own legal obligations unless Webb Design has expressly agreed in writing to provide specific compliance services.

11. Payment information

Where you pay Webb Design for services, payment information may be processed by banks, payment processors, invoicing providers or other financial services providers.

We do not intentionally store complete payment-card details ourselves unless specifically required and lawfully permitted.

We may retain information relating to payments, invoices and transactions for accounting, taxation, contractual and legal purposes.

12. Who we may share information with

We only share personal information where reasonably necessary.

This may include:

• website hosting providers;
• domain registrars;
• email providers;
• cloud storage providers;
• website security providers;
• analytics providers;
• payment processors;
• banks;
• accountants or bookkeepers;
• professional advisers;
• contractors or subcontractors assisting with an agreed project;
• software and technology providers;
• law enforcement or regulatory authorities where legally required; and
• potential purchasers or advisers in connection with a legitimate sale or restructuring of the business.

Where another organisation processes personal information on our behalf, we take reasonable steps to ensure that appropriate protections are in place.

13. International transfers

Some technology providers used by Webb Design may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer is made using a lawful mechanism recognised under UK data protection law, where required.

This may include transfers to countries recognised as providing an adequate level of protection or transfers covered by appropriate contractual safeguards.

14. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet legal, accounting, contractual or regulatory obligations.

Typical retention periods may include:

General enquiries: normally up to 24 months after the last meaningful contact, unless there is a reason to retain the correspondence for longer.

Unsuccessful quotations: normally up to 24 months.

Client and project records: normally for the duration of the client relationship and for up to 6 years afterwards where reasonably necessary for contractual, taxation or legal purposes.

Invoices and accounting records: normally at least 6 years or for any other period required by applicable tax or accounting law.

Server and security logs: normally retained for a substantially shorter period unless required to investigate security incidents or legal matters.

Marketing information: until you unsubscribe, withdraw consent or we determine that the information is no longer required.

These periods are guidelines and may vary where there is a legal or legitimate reason to retain information for longer or delete it sooner.

15. Security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• alteration;
• disclosure;
• accidental loss;
• destruction; and
• misuse.

Measures may include access controls, secure passwords, software updates, security tools, encryption where appropriate and restricted administrative access.

No internet-based service can be guaranteed to be completely secure, and we cannot guarantee absolute security of information transmitted electronically.

16. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights including:

Right of access

You may ask us for a copy of personal information we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete information.

Right to erasure

In certain circumstances you may ask us to delete personal information.

Right to restrict processing

In certain circumstances you may ask us to restrict how your information is used.

Right to object

You may have the right to object to certain types of processing, including direct marketing.

Right to data portability

In certain circumstances, you may ask us to transfer information you supplied to us to you or another organisation in a commonly used format.

Right to withdraw consent

Where we rely on your consent, you may withdraw that consent at any time.

These rights are subject to legal conditions and exemptions and do not apply in every circumstance.

We will not normally charge a fee for exercising your data protection rights.

17. Marketing

We may send existing or prospective customers information about our services where permitted by law.

Where consent is required, we will obtain it before sending marketing.

You may opt out of marketing communications at any time by using an unsubscribe option provided or contacting:

info@webbdesign.co.uk

We may still contact clients about active projects, invoices, security issues, hosting, maintenance or other service-related matters even if they have opted out of marketing.

18. Children’s information

Our services are primarily intended for businesses and adults.

We do not knowingly use our website to collect personal information from children for marketing purposes.

If you believe a child has provided personal information to us inappropriately, please contact us.

19. Third-party websites

Our website may contain links to websites operated by third parties.

Webb Design is not responsible for the privacy practices, content or security of external websites.

We recommend reviewing the privacy information provided by any third-party service you use.

20. Changes to this Privacy Notice

We may update this Privacy Notice periodically to reflect changes to:

• our services;
• the way we use information;
• technology;
• third-party services; or
• applicable law or regulatory guidance.

The current version will be published on this website and the “Last updated” date will be changed accordingly.

21. Complaints

If you have concerns about how we use your personal information, please contact us first so we have an opportunity to investigate the issue.

Email:

info@webbdesign.co.uk

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Information about making a complaint is available at the ICO website.

22. Contact us

Questions about this Privacy Notice or requests relating to your personal information should be sent to:

OK LETS GO LTD
71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: info@webbdesign.co.uk
Website: webbdesign.co.uk