Privacy policy
Last updated: [DD Month YYYY]
This policy explains how [Company Legal Name Ltd], trading as Facelifted ("we", "us"), collects and uses personal data when you use this website or contact us. We are the data controller for this data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
[Company Legal Name Ltd], registered in England & Wales, company number [00000000]. Registered address: [Street, Town, Postcode]. Email: hello@facelifter.uk. ICO registration number: [ZA000000].
What we collect
- Enquiry form: your name, business name, current website, email, phone number, type of business, town, project requirements and budget.
- Emails and calls: whatever you choose to tell us when you get in touch.
- Payments: handled by Stripe. We do not see or store your full card details; we receive confirmation of payment, your name and email.
- Technical data: our hosting provider may log IP addresses and browser information for security and to keep the site running.
Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Reviewing your website and preparing a free redesign preview you asked for | Steps at your request before entering a contract; consent (via the form) |
| Building, hosting and maintaining your website | Performance of a contract |
| Invoicing, payments and accounting records | Legal obligation |
| Keeping the website secure | Legitimate interests |
| Occasional updates about our services (you can opt out at any time) | Legitimate interests / consent where required by PECR |
Who we share it with
We only share data with service providers who help us run the business, under appropriate contracts: website hosting and form handling (Netlify), payments (Stripe), email (Google (Gmail)) and our accountant. Some of these providers may process data outside the UK; where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to protect it. We never sell your data.
How long we keep it
Enquiries that don't go ahead: up to [12 months]. Client records: for the length of our contract and then up to 6 years for tax and accounting purposes.
Cookies
This site does not use advertising or analytics cookies. [If you add analytics, update this section and add a cookie banner where required.] Fonts are loaded from Google Fonts, which receives your IP address to deliver them.
Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to the use of your personal data, the right to data portability, and the right to withdraw consent at any time. To use any of these rights, email hello@facelifter.uk. We'll respond within one month.
Complaints
If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, 0303 123 1113.
Changes
We may update this policy from time to time. The latest version will always be on this page.