Privacy policy
How we handle your personal data, in plain English.
Working draft. This policy accurately describes how the site behaves today, but it has not yet been reviewed by a solicitor. Have it checked before launch, then delete this notice.
Who we are
Affordable Website Design is a trading style of Garbott Ltd (“we”, “us”), a company registered in England and Wales under company number 09884819, with its registered office at 13a Bankside, Kidlington, Oxfordshire OX5 1JE. Garbott Ltd is the data controller for the personal data described in this policy.
For any privacy question, email [email protected] or call 01865 689798.
What we collect
When you send us an enquiry
The enquiry form asks for your name, business name, email address, phone number, your current website address, which service you are interested in, and whatever you write in the message box. Only your name, email address and message are required; the rest are optional and only there to help us give you a useful answer.
When you simply read the site
Our hosting provider records standard server logs, which include your IP address, the pages requested, timestamps and your browser’s user-agent string. These are used to keep the site running and secure, and are not used to build any profile of you.
Cookies and tracking
This website sets no cookies of its own, and includes no third-party analytics, advertising pixels or social media trackers. There is nothing to consent to, which is why you are not being asked to dismiss a banner. If that ever changes, this policy will be updated and consent will be requested before anything is set.
Why we use your data, and on what basis
- To reply to your enquiry and provide a quote. Lawful basis: taking steps at your request prior to entering into a contract, and your consent given when you tick the consent box.
- To provide our services if you become a client. Lawful basis: performance of our contract with you.
- To keep the website secure and working. Lawful basis: our legitimate interests in protecting our systems.
- To meet our legal and accounting obligations. Lawful basis: compliance with a legal obligation.
We do not use your data for automated decision-making or profiling, and we do not send marketing emails to people who have simply enquired.
Who we share it with
We do not sell your data and we do not share it for anyone else’s marketing. We use a small number of service providers who process data on our behalf:
- Netlify — website hosting and form submission handling.
- Our email provider — to receive and reply to your enquiry.
- Our accountants and, where legally required, HMRC — for client billing records only.
Some of these providers operate infrastructure outside the UK. Where personal data is transferred internationally, that transfer is covered by an adequacy decision or by standard contractual clauses.
How long we keep it
- Enquiries that do not become work: up to 24 months, then deleted.
- Client records: for the duration of the contract and 7 years afterwards, to meet accounting requirements.
- Server logs: typically 30 days.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.
To exercise any of these, email [email protected]. We will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Security
The site is served entirely over HTTPS. Enquiry data is transmitted encrypted, access to it is limited to the people who need it, and we apply security updates to the systems we control as a matter of routine.
Changes to this policy
If we change this policy we will update the page and the date below. Material changes affecting existing clients will be communicated directly.
Last updated: 9 September 2026.