Privacy Policy
Last updated: 30 May 2026
1. Who We Are
This website is operated by Daniel Walsh, trading as WebStudio365 (“WebStudio365”, “we”, “us”, or “our”). We are the Data Controller for the personal data collected through this website.
Trading name: WebStudio365
Data Controller: Daniel Walsh
Address: Cortina, Rising Lane, B93 9LT, United Kingdom
Email: data@webstudio365.co.uk
Website: webstudio365.co.uk
2. What Personal Data We Collect
We collect personal data in the following circumstances:
a) Contact Form
When you submit our contact form, we collect:
- Full name
- Email address
- Business name
- Project scope / description
- Preferred budget or payment option
- Your IP address (collected automatically for security and spam-prevention purposes)
b) Automatically Collected Data (Analytics & Tracking)
When you browse our website, certain data is collected automatically via cookies and third-party analytics services, including:
- IP address (anonymised where possible)
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referral source (e.g. the website that linked you to us)
- Device type (desktop, mobile, tablet)
- Mouse movements, scrolls, and click heatmaps (Microsoft Clarity)
Please see our Cookie Policy for full details of the cookies used.
3. How and Why We Use Your Data
We use your personal data for the following purposes and on the following legal bases under the UK General Data Protection Regulation (UK GDPR):
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Respond to your enquiry and provide a quote | Name, email, business name, project details | Legitimate interests (Art. 6(1)(f)) / pre-contractual steps (Art. 6(1)(b)) |
| Store enquiry records for business and legal purposes | All contact form data | Legitimate interests (Art. 6(1)(f)) |
| Spam and abuse prevention on the contact form | IP address, reCAPTCHA token | Legitimate interests (Art. 6(1)(f)) |
| Website analytics — understanding how visitors use our site to improve it | Anonymised usage data, device/browser info | Consent (Art. 6(1)(a)) via cookie consent |
| Session recording and heatmaps (Microsoft Clarity) | Mouse movements, clicks, scrolls | Consent (Art. 6(1)(a)) via cookie consent |
4. Third-Party Service Providers
We use certain trusted third-party services to operate this website. Each acts as a data processor or separate data controller for the data they receive. We have taken reasonable steps to ensure they provide adequate protections for your data.
Google Analytics (Google Ireland Ltd)
Used to analyse website traffic and visitor behaviour. IP addresses are anonymised. Data may be transferred to Google’s servers in the United States under Standard Contractual Clauses.
Google Search Console (Google Ireland Ltd)
Used to monitor search performance and technical health of our website. This service processes aggregated search data; it does not collect personal data about individual website visitors.
Google reCAPTCHA (Google Ireland Ltd)
Used on our contact form to prevent automated spam submissions. reCAPTCHA analyses visitor behaviour and may collect device data, IP address, and browser information. Its use is subject to Google’s Terms of Service and Privacy Policy.
Google Workspace (Google Ireland Ltd)
We use Google Workspace for our business email. When you submit an enquiry, a notification email containing your contact details is sent to and stored within our Google Workspace account.
Microsoft Clarity (Microsoft Corporation)
Used to record anonymised session replays, click heatmaps, and scroll maps to help us improve the usability of our website. Microsoft Clarity does not collect personally identifiable information. Data may be processed in the United States under Standard Contractual Clauses.
5. Cookies
Our website uses cookies and similar tracking technologies. We use strictly necessary cookies (required for the website to function) as well as optional analytics and tracking cookies that are only activated with your consent.
For full details of each cookie we use, its purpose, and how to manage your preferences, please see our Cookie Policy.
6. How Long We Keep Your Data
We retain personal data only for as long as is necessary for the purposes set out in this policy:
- Contact form enquiries — retained for up to 3 years from the date of submission, or longer if a commercial relationship develops, in which case standard HMRC record-keeping rules apply (6 years from the end of the relevant financial year).
- Email correspondence — retained for up to 3 years, or as required by law.
- Analytics data — retained in accordance with each third-party provider’s own retention policy (typically 14 months for Google Analytics).
- Session recordings (Microsoft Clarity) — retained for up to 30 days per Microsoft Clarity’s default settings.
When data is no longer required, it is securely deleted or anonymised.
7. International Data Transfers
Some of our third-party service providers (including Google and Microsoft) may transfer and process your data outside of the United Kingdom and European Economic Area (EEA), including in the United States. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO), to protect your personal data.
8. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:
How to exercise your rights
To exercise any of the above rights, please contact us by email at data@webstudio365.co.uk. We will respond to all legitimate requests within one calendar month. We may need to verify your identity before processing your request.
9. Right to Lodge a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection matters in the United Kingdom.
ICO Website: ico.org.uk
ICO Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at data@webstudio365.co.uk.
10. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or damage. These measures include:
- HTTPS encryption for all data transmitted via this website
- Secure, access-controlled database storage
- Limited access to personal data (only the Data Controller processes enquiry data)
- Regular security updates and patches applied to all software
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us.
11. Children’s Privacy
Our website and services are directed at businesses and adults only. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete it.
12. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any website you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact the Data Controller:
Data Controller: Daniel Walsh (trading as WebStudio365)
Address: Cortina, Rising Lane, B93 9LT, United Kingdom
Email: data@webstudio365.co.uk