Privacy
policy.

Kingswinford Digital (“we”, “us”, “our”) is a web design and development studio based in Kingswinford, West Midlands, United Kingdom. We are the data controller for the personal information described in this policy.

This policy explains what information we collect when you visit kingswinford.digital, use our free tools, get in touch, book a call or become a client, and what we do with it. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us about anything in this policy at hello@kingswinford.digital.

We only collect what we need. Depending on how you use the site, that can include:

• Enquiries: your name, email address, phone number (if given), business name and the details of your project.
• Website plans: the answers you give in our “Plan your website” planner, such as your goals, pages, features, timescales and contact details.
• Discovery calls: your name, email address, business, the time you choose and any notes you add.
• Free website audits and comparisons: the web addresses you enter, the results, and your email address if you ask us to send you the report.
• Client accounts: your name, email address, password (stored securely and never visible to us), contact and billing details, and the content of support tickets, change requests and files you upload.
• Services we manage for you: domain registration details, email mailbox names, hosting and website monitoring information.
• Payments: invoices and payment status. Card details are entered directly with our payment provider, Stripe; we never see or store your full card number.
• Technical information: to prevent abuse of our free tools and forms, we keep a scrambled (one-way encoded) version of your IP address. We cannot turn this back into your real IP address.

We use your information for the following purposes, each with a lawful basis under UK GDPR:

• To reply to your enquiry, review your website plan and run your discovery call. Basis: taking steps at your request before entering a contract.
• To deliver the work and services you have agreed with us, manage your account, send invoices and provide support. Basis: performance of a contract.
• To keep financial records for tax and accounting. Basis: legal obligation.
• To run the free audit tool, email you the report you asked for, and prevent spam or misuse of our forms. Basis: legitimate interests.
• To send occasional follow-up messages about an enquiry, plan or audit you started with us. You can tell us to stop at any time. Basis: legitimate interests.

We do not sell your information, we do not use it for advertising, and we do not make automated decisions about you that have legal or similarly significant effects.

We never sell your information. To run our services, we work with a small number of carefully chosen infrastructure partners who only process it on our instructions and are contractually bound to keep it secure. These fall into the following categories:

• Secure data storage – the systems that store your account and project information.
• Payment processing – card payments are handled by Stripe, a regulated payment provider.
• Email delivery – sending messages such as confirmations, reports and invoices.
• Calendar and video calls – sending invitations and call links for discovery calls.
• Website testing – running the speed and quality checks in our free audit. Only the web address you enter is used.
• Infrastructure partners – the data centres and network infrastructure behind our hosting, domain and email services. Domain registration details are also passed to the relevant domain registry, as the rules for domain names require.
• Internal team tools – private notifications so our team can respond quickly to enquiries, bookings and support requests.

If you would like more detail about any of these, just ask. Some partners may store data outside the UK, including in the United States or European Economic Area. Where they do, the transfer is protected by safeguards approved under UK law, such as the UK International Data Transfer Addendum or the UK–US Data Bridge.

We may also share information if the law requires it, or to protect our rights or the safety of others.

We do not use advertising or tracking cookies, and we do not run third-party analytics on this site. We only use small pieces of browser storage that are strictly necessary for the site to work:

• Keeping you signed in to your client account, and remembering whether you chose to stay signed in.
• Remembering your light or dark display preference.
• Keeping an in-progress website audit on screen if you refresh the page. This is cleared when you close the tab.
• Remembering how you arranged the menu in your client dashboard.

Because these are essential, they do not need your consent. You can clear them at any time in your browser settings.

• Enquiries, website plans and discovery-call details: up to 2 years after our last contact if you do not become a client.
• Free audit results and the email address you gave for them: up to 12 months.
• Client account, project and support records: for as long as you are a client, and up to 6 years afterwards.
• Invoices and payment records: 6 years, as required by HMRC.

After these periods, we delete your information or make it anonymous.

Your information is sent over encrypted connections and stored with access controls, so only the people who need it can see it. Client accounts are protected by passwords that are stored in scrambled form. No system is perfectly secure, but if we ever become aware of a breach that puts you at risk, we will tell you and the Information Commissioner’s Office where required.

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information;
• ask us to limit how we use it, or object to us using it;
• ask for your information in a format you can take elsewhere;
• withdraw consent at any time, where we rely on it.

To use any of these rights, email hello@kingswinford.digital. We will respond within one month. There is normally no charge.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Our services are intended for businesses and adults. We do not knowingly collect information from anyone under 18. If you think a child has sent us their details, please contact us and we will delete them.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top. If we make significant changes that affect clients, we will let you know by email.