Privacy Policy

Last Updated: 29 October 2026

Angelo Web Design Ltd (“we”, “us” or “our”) is committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enter into a Project Agreement, purchase our services or otherwise interact with our business.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, as amended, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

Angelo Web Design Ltd is a company registered in England and Wales under company number 13279433.

Our contact details are:

• Business Name: Angelo Web Design Ltd
• Website: https://angeloweb.co.uk/
• Email: luke@angeloweb.co.uk
• Telephone: 01484 941 350

For personal information collected through our own website, customer communications, contracts, invoicing and business administration, Angelo Web Design Ltd is generally the Data Controller. This means we determine why and how that personal information is processed.

When developing, maintaining or hosting websites and software for clients, we may act as a Data Processor on their behalf. This is explained further in Section 8.

2. What Personal Information We Collect

The personal information we collect depends on how you interact with our business and which services you use.

2.1 Website Enquiries and Communications

When you contact us through our website, email, telephone or another communication channel, we may collect:

• Your full name
• Your business or organisation name
• Your email address and telephone number
• Your town, city or business location
• Information about your project or requirements
• Messages, attachments and other information you provide
• Records of correspondence and communications

We use this information to respond to enquiries, provide quotations, discuss potential projects and maintain appropriate business records.

2.2 Customer and Project Information

When you become a client, we may collect additional information required to provide our services, including:

• Your full name and business name
• Your business address and postal address, where different
• Your contact details
• Project quotations, proposals and specifications
• Details of agreed services, deliverables and project requirements
• Project correspondence, feedback and approvals
• Billing information and payment records
• Relevant technical information, account details and access credentials required to perform agreed services

We only request information that is reasonably necessary for the relevant business purpose.

2.3 Digital Project Agreements and Electronic Signatures

We operate an online Project Agreement system through our website. Clients are required to review and digitally sign their Project Agreement before development work commences.

When you complete a digital agreement, our system may collect and record:

• Your full name and business name
• Your business and postal addresses
• Your email address and telephone number
• Your electronic signature
• The date and time the agreement was accepted
• Your IP address
• The quotation, agreement and Terms and Conditions accepted
• Associated agreement records and verification information

We collect this information to create a reliable record of contractual acceptance, identify the person entering into the agreement, maintain an audit trail and provide evidence of the agreement if a dispute arises.

A copy of the completed agreement may be generated and stored electronically and provided to the client.

Electronic signature information is not collected for advertising purposes.

2.4 Payment and Billing Information

When you purchase services from us, we may process:

• Your name and billing contact details
• Business and billing addresses
• Invoices and payment amounts
• Payment dates, statuses and transaction references
• Refund and credit records
• Information concerning outstanding balances or payment disputes
• Direct Debit mandate references and relevant payment status information, where applicable

Where payment is made through a third-party payment provider, that provider may collect and process additional financial information in accordance with its own privacy policy.

2.5 Website Usage and Technical Information

When you visit our website, certain technical information may be collected automatically, including:

• Your IP address
• Browser type and version
• Device type and operating system
• Pages visited and interactions with website content
• Referral information
• Dates and times of visits
• Technical diagnostic and security information
• Cookie preferences and consent choices

Some of this information is collected through strictly necessary security technologies. Optional analytics information is collected in accordance with your cookie preferences.

3. How We Collect Personal Information

We collect personal information through several sources, including:

• Directly from you: When you submit an enquiry, request a quotation, sign a Project Agreement, make a payment or communicate with us.
• Through our website: When you interact with forms, consent controls and other website functionality.
• Through service providers: When payment providers, hosting providers or other suppliers supply information necessary to deliver our services.
• From clients and authorised representatives: When a business provides information about its employees, representatives or other individuals involved in a project.
• From publicly available business sources: Such as company websites, business directories and Companies House, where relevant to legitimate business development activities.

Where information is obtained from someone other than the individual concerned, we will provide relevant privacy information where required by law.

4. How We Use Your Personal Information and Our Lawful Bases

We only process personal information where there is an appropriate lawful basis under UK data protection legislation.

4.1 Responding to Enquiries

We use contact information and enquiry details to respond to messages, discuss services, prepare quotations and communicate with prospective customers.

Lawful Basis: Legitimate Interests, or steps taken before entering into a contract where applicable.

4.2 Entering Into and Managing Contracts

We process customer information to prepare, execute and administer Project Agreements, including our Two Payments, Pay Monthly and Milestone Project arrangements.

This includes recording electronic signatures, agreement acceptance details and relevant communications.

Lawful Basis: Performance of a Contract where applicable, and Legitimate Interests in maintaining reliable contractual records and protecting our legal rights.

4.3 Delivering Our Services

We use information supplied by clients to provide agreed services, including website design, development, e-commerce functionality, bespoke software development, hosting, maintenance and related technical services.

Lawful Basis: Performance of a Contract where applicable, or Legitimate Interests in delivering agreed business services. Where we act as a Data Processor, processing is governed by the relevant client’s instructions and applicable data processing arrangements.

4.4 Processing Payments and Maintaining Financial Records

We process billing information to issue invoices, collect payments, administer Direct Debits, process refunds, manage outstanding balances and maintain accounting records.

Lawful Basis: Performance of a Contract, Legal Obligation and, where appropriate, Legitimate Interests in managing payments and recovering legitimate debts.

4.5 Website Security and Spam Prevention

We may process IP addresses and other technical information to protect our website, prevent fraudulent activity, identify security threats and reduce automated spam submissions.

Lawful Basis: Legitimate Interests in maintaining the security and integrity of our website and services, together with applicable legal obligations.

4.6 Website Analytics

We use Google Analytics to understand how visitors use our website and identify opportunities for improvement.

Optional analytics cookies and associated analytics processing are controlled through our cookie consent system.

Lawful Basis: Consent for optional analytics cookies and the associated consent-based processing.

4.7 Marketing and Business Development

We may use business contact information to communicate about our services, respond to sales enquiries and conduct lawful business-to-business marketing.

Lawful Basis: Legitimate Interests where permitted, or Consent where required by applicable marketing legislation.

4.8 Legal Compliance and Disputes

We may process and retain relevant information to comply with legal requirements, resolve complaints, establish or defend legal claims and enforce contractual rights.

Lawful Basis: Legal Obligation and Legitimate Interests, as applicable.

5. Online Project Agreements and Electronic Signatures

Our online agreement system allows clients to review and accept quotations, project terms and other contractual documents electronically.

The system records information necessary to demonstrate when an agreement was accepted and by whom.

This may include an electronic signature, date and time of acceptance, IP address and a record of the applicable contractual documents.

We use these records for the following purposes:

• Confirming that a client has accepted the relevant agreement
• Maintaining an accurate record of contractual obligations
• Providing the client with a copy of their signed agreement
• Investigating questions or disputes about contractual acceptance
• Establishing, exercising or defending legal rights
• Meeting applicable record-keeping requirements

Access to agreement records is restricted to authorised persons and relevant service providers who require access for legitimate business purposes.

We may retain signed agreement records after a project has ended where reasonably necessary for legal, contractual or record-keeping purposes.

6. Payments, Invoices and Direct Debits

We offer different payment arrangements depending on the type of project and the applicable Project Agreement.

6.1 Two Payments Projects

For projects operating under our Two Payments arrangement, we process information relating to deposits, final invoices, payments and refunds where applicable.

Payment information is used to administer the agreed payment schedule and maintain accurate accounting records.

6.2 Pay Monthly Projects

For Pay Monthly website development projects, payments are collected through GoCardless Direct Debit.

GoCardless processes information required to establish and operate Direct Debit mandates, including bank account information supplied through its payment process.

We may receive and retain relevant customer information, mandate references, transaction details, collection statuses and payment notifications necessary to administer the payment arrangement.

GoCardless handles personal information in accordance with its own privacy notice and applicable data protection obligations.

Further information is available at GoCardless Privacy Notice.

6.3 Milestone Projects

For Milestone Projects, invoices and payment instructions are normally sent to clients manually by email.

We process relevant billing and transaction information to administer payments for individual project milestones and maintain financial records.

6.4 Payment Security

We use appropriate payment processing arrangements and reasonable technical and organisational safeguards to protect payment-related information.

Where financial details are collected directly by an external payment provider, that provider is responsible for handling them in accordance with its own applicable data protection obligations.

7. Website Hosting and Technical Services

Where clients purchase website hosting, maintenance or technical services through Angelo Web Design Ltd, we may process personal information necessary to administer and support those services.

This may include:

• Client and account contact information
• Hosting account details
• Website administration information
• Technical support requests
• Server and website security logs
• Website backups and database information
• Information necessary to diagnose or resolve technical issues

Website hosting and backup services may involve the storage of personal information belonging to our clients or their website users.

We apply appropriate safeguards and limit access to those who reasonably require it for the delivery, security or support of the relevant services.

Where hosting services end, client data will be handled in accordance with the applicable agreement, relevant retention arrangements and data protection obligations.

8. Personal Information Processed on Behalf of Clients

As a web development company, we may access or process personal information when developing, testing, maintaining or hosting websites, web portals, e-commerce platforms and bespoke software systems for clients.

Depending on the project, this information may relate to a client’s customers, employees, suppliers or other authorised users.

Where a client determines the purposes and means of processing this information, that client will generally act as the Data Controller and Angelo Web Design Ltd may act as a Data Processor.

In these circumstances:

• We process personal information on the client’s documented instructions, except where otherwise required by law.
• We use the information only for authorised project-related purposes.
• We implement appropriate technical and organisational safeguards.
• We restrict access to those who reasonably require it.
• We apply confidentiality obligations where appropriate.
• We assist clients with applicable data protection responsibilities to the extent required by law and agreed processing arrangements.
• We return, delete or otherwise handle information at the end of the engagement in accordance with applicable contractual and legal obligations.

Where required, the responsibilities of each party will be documented in a separate Data Processing Agreement or equivalent contractual provisions.

If you are an individual whose personal information is processed through a website or system operated by one of our clients, the relevant client’s Privacy Policy will normally explain how your information is used and how you can exercise your rights.

9. Marketing Communications

We may communicate with existing and prospective business customers about our services, project opportunities and relevant business information.

This may include business-to-business postal marketing, communications following an enquiry or other marketing permitted by applicable law.

For business development activities, we may obtain contact details from publicly accessible sources, including business websites, company registers and business directories.

Where this information identifies an individual, we process it in accordance with UK data protection legislation.

We comply with applicable direct marketing requirements, including the Privacy and Electronic Communications Regulations where relevant.

We will provide an appropriate means of opting out of direct marketing communications.

You have the right to object to the processing of your personal information for direct marketing purposes at any time.

To opt out, email luke@angeloweb.co.uk.

Where an objection is received, we will stop the relevant direct marketing processing and may retain limited suppression information to ensure your preference is respected.

10. Cookies, Google Analytics and Website Security

Our website uses cookies and similar technologies to support essential functionality, remember user preferences, measure website performance and protect against automated abuse.

10.1 Strictly Necessary Cookies

Some cookies or similar technologies are required for the website to function securely and correctly.

These may include technologies used to maintain essential functionality, remember privacy preferences and provide security protection.

Strictly necessary technologies may operate without consent where an applicable exemption under PECR applies.

10.2 Google Analytics

We use Google Analytics to understand website traffic, identify popular pages and improve our services and website experience.

Analytics cookies are optional. Our consent-based implementation enables these cookies only when you have agreed to their use.

You can reject optional analytics cookies or withdraw your consent through our website’s cookie preference controls.

10.3 Cloudflare Turnstile

We use Cloudflare Turnstile to help protect website forms against spam, automated submissions and malicious activity.

Cloudflare Turnstile may process technical information, including IP addresses, browser characteristics and connection information, to determine whether an interaction is likely to be legitimate.

This information is processed for website security and abuse prevention purposes rather than advertising.

10.4 Managing Cookie Preferences

When you first visit our website, you are presented with a cookie preferences interface allowing you to accept, reject or manage optional cookies.

You can change your preferences at any time using the Cookie Settings option on our website.

Further information about individual cookies, their purposes, typical durations and how to manage them is available in our Cookie Policy.

11. Sharing Personal Information With Third Parties

We may share personal information with trusted service providers where reasonably necessary for the delivery, administration, security or improvement of our services.

Depending on the services used, these may include:

• Website hosting and infrastructure providers: To host websites, maintain backups and provide technical infrastructure.
• GoCardless: To establish and manage Direct Debit payments and associated transaction records.
• Other payment service providers: To process relevant online payments and refunds.
• Google Analytics: To provide consent-based website analytics.
• Cloudflare: To provide website security and spam prevention functionality.
• Email and communication providers: To deliver correspondence, agreement copies, invoices and other relevant communications.
• Accounting and professional advisers: To maintain financial records and obtain accounting or legal assistance.
• Technical service providers: To assist with authorised development, maintenance, infrastructure or support activities.

We may also disclose personal information where reasonably necessary to establish or defend legal claims, respond to lawful requests from public authorities or comply with applicable legal obligations.

Where required, we use appropriate contractual and organisational safeguards when engaging third-party processors.

We do not sell personal information to third-party advertisers.

12. International Transfers of Personal Information

Some of our service providers may process or store personal information outside the United Kingdom.

Where an international transfer is subject to UK GDPR restrictions, we will ensure that an appropriate legal transfer mechanism applies.

Depending on the circumstances, this may include:

• Transfers to countries covered by UK adequacy regulations
• Relevant arrangements under the UK Extension to the EU-US Data Privacy Framework, where applicable
• The UK International Data Transfer Agreement
• The UK Addendum to approved international standard contractual clauses
• Other legally permitted transfer safeguards or exceptions, where appropriate

We take reasonable steps to ensure that personal information remains appropriately protected when processed internationally.

You may contact us for further information about the safeguards relevant to transfers of your personal information, including how to obtain a copy where applicable.

13. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, contractual and record-keeping requirements.

Retention periods vary depending on the nature of the information.

13.1 Enquiries and Prospective Customer Records

We retain enquiry information for as long as reasonably necessary to respond to your enquiry, maintain relevant correspondence and manage any subsequent business relationship.

Where an enquiry does not lead to a project, we periodically review whether continued retention is necessary.

13.2 Project Agreements and Electronic Signatures

We retain signed Project Agreements, electronic signatures and associated verification information for the duration of the relevant contractual relationship and for a reasonable period afterwards.

This may include retaining relevant records for up to six years following the end of the agreement, or longer where required by law, an ongoing dispute or a relevant legal claim.

Such records may be necessary to demonstrate contractual acceptance, resolve disagreements and establish or defend legal rights.

13.3 Financial and Accounting Records

Invoices, payment records and associated financial information are retained in accordance with applicable accounting and tax requirements, typically for at least six years where required by law.

13.4 Client Project Information

Information relating to active projects is normally retained for the duration of the project or ongoing service relationship.

Following termination or completion, relevant information may be retained where required for contractual obligations, legal compliance, legitimate record-keeping or agreed support arrangements.

Where we process information on behalf of a client, retention and deletion arrangements are also subject to the relevant data processing instructions and contractual requirements.

13.5 Technical Logs and Analytics Information

Technical and security information is retained for periods appropriate to the purposes of operational monitoring, troubleshooting, website security and the investigation of suspected abuse.

Analytics information and cookie-related data are retained according to the applicable analytics settings, cookie durations and consent arrangements described in our Cookie Policy.

When personal information is no longer required, we take reasonable steps to securely delete, anonymise or otherwise dispose of it, subject to any remaining legal or contractual obligations.

14. How We Protect Personal Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, destruction or loss.

Depending on the relevant system or service, these measures may include:

• Secure website connections using HTTPS and SSL/TLS encryption
• Access controls and appropriate account permissions
• Restricted access to sensitive business records
• Security updates and relevant software maintenance
• Website and server security protections
• Backups and recovery arrangements
• Appropriate contractual safeguards with service providers
• Procedures for responding to suspected security incidents

Although we take reasonable steps to protect information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Where a personal data breach occurs, we will assess it and take appropriate action in accordance with applicable data protection obligations.

15. Your Data Protection Rights

Depending on the circumstances and the lawful basis for processing, you have rights under UK data protection legislation.

These may include:

• Right of Access: To request access to personal information we hold about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal information.
• Right to Erasure: To request deletion of personal information in circumstances where this right applies.
• Right to Restrict Processing: To request that certain uses of your personal information are restricted.
• Right to Data Portability: To receive certain information in a structured, commonly used and machine-readable format, where applicable.
• Right to Object: To object to processing based on Legitimate Interests and to direct marketing.
• Right to Withdraw Consent: To withdraw consent at any time where processing is based on consent.
• Rights Relating to Automated Decisions: To receive applicable protections concerning solely automated decisions that produce legal or similarly significant effects.

We do not use solely automated decision-making to make legal or similarly significant decisions about clients or website visitors.

These rights are not absolute and may be subject to exemptions or other limitations under applicable law.

For example, we may be required to retain certain contractual or financial information even where deletion is requested.

Where processing relies on consent, withdrawing consent does not affect the lawfulness of processing completed before withdrawal.

To exercise your rights, please email luke@angeloweb.co.uk.

We may request reasonable information to verify your identity before responding to a request.

We will respond within the timescales required by applicable data protection legislation.

16. Data Protection Complaints

If you are concerned about how we have handled your personal information, please contact us so that we can investigate your concerns.

You can submit a data protection complaint by emailing luke@angeloweb.co.uk.

Please explain the nature of your complaint and provide sufficient information to help us investigate.

We will acknowledge receipt of data protection complaints within 30 days, investigate without undue delay, keep you appropriately informed and communicate the outcome in accordance with applicable legal requirements.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.

Further information is available from the ICO:

• Website: https://ico.org.uk/
• Telephone: 0303 123 1113

17. Information We Require to Provide Services

Some personal information is necessary for us to provide quotations, enter into agreements, issue invoices or deliver contracted services.

For example, clients entering into a Project Agreement must provide the information reasonably required to identify the contracting party, establish the agreement and administer the project.

Where required information is not provided, we may be unable to enter into an agreement or provide the requested service.

Providing consent for optional website analytics or marketing communications is not a condition of purchasing our services.

18. Children’s Privacy

Our website and services are primarily intended for businesses and adults acting in a professional or commercial capacity.

We do not knowingly collect personal information directly from children for our own marketing or customer acquisition purposes.

Where we process children’s information on behalf of a client as part of an agreed software development, hosting or technical service, that processing is subject to applicable data protection requirements and the relevant client’s instructions.

19. Links to Third-Party Websites

Our website may contain links to websites and services operated by third parties.

We are not responsible for the privacy practices of websites that we do not operate.

We recommend reviewing the privacy notices of third-party websites before providing them with personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, internal processes, third-party providers or applicable legislation.

Where we make changes, the updated policy will be published on this page with a revised Last Updated date.

Where changes materially affect how personal information is processed, we will provide additional notice or seek consent where required by law.

We encourage visitors and clients to review this policy periodically.

21. Contact Us

If you have any questions about this Privacy Policy, how we process personal information or your data protection rights, please contact:

Angelo Web Design Ltd
Company Number: 13279433
Registered in England and Wales

Email: luke@angeloweb.co.uk
Telephone: 01484 941 350
Website: https://angeloweb.co.uk/

For more information about website cookies, please see our Cookie Policy.