Privacy policy

1. Who we are

Wonderful Web is a UK digital studio operated by Daniel Hobson (Founder). For privacy questions, email hello@wonderfulweb.co.uk.

2. What this notice covers

This page covers personal data we collect through our website — mainly via the project enquiry form — and how we hold, use, and protect it. It also outlines your rights under UK GDPR.

3. What we mean by personal data

Personal data is information that identifies you, directly or indirectly. That includes obvious details such as your name and email address, as well as technical identifiers such as IP address where they can be linked to you.

4. Your rights

Under UK GDPR you can ask us to:

• Tell you how we use your data (this notice is the starting point)
• Provide a copy of the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data where we no longer need it
• Restrict or object to certain processing
• Receive your data in a portable format where that right applies

To exercise any of these rights, contact hello@wonderfulweb.co.uk. You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

5. What we collect

When you submit our contact form, we collect what you choose to send us, which may include:

• Name
• Business name
• Industry
• Email address
• Optional message about your business

Our hosting and email providers may also process limited technical data (such as IP address and request logs) needed to run and secure the site.

6. Cookies and analytics

We measure how people find and use this site with two tools, and they are treated differently because only one of them sets cookies.

• Our own analytics — first-party and cookieless. It sets no cookie and stores no persistent identifier or IP address: visits are counted using a hash that is salted on our server, and the salt is deleted after 48 hours, so one day’s figures can never be relinked to the next. Because it stores nothing on your device and cannot identify you, it runs for every visitor and needs no consent. It also records which answer you gave to the cookie banner — so that we know what proportion of visitors the Google figures below represent — but not anything that identifies you.
• Google Analytics 4 — sets cookies (_ga and _ga_…) that recognise your browser on a later visit, so we can see which pages bring in enquiries. These are not strictly necessary, so we ask first: Google Analytics is not loaded and no cookie is set unless you choose “Accept” on the cookie banner. If you decline, or simply ignore the banner, nothing is requested from Google at all.
  
  If you do accept, we also tell Google when certain things happen: an enquiry form is started, sent or fails; a phone number, booking link or “Get started” button is tapped; the introduction video is played; and which section of a page you reached. Each one carries only where on the site it happened — for example the page area the button was in, and for an enquiry the trade you selected from the list. Nothing you type into the form is ever sent to Google: not your name, business name, email address or message. If a form is rejected because a field was filled in wrongly, we record only the names of those fields, never what was in them.
• Google Tag Manager — the tool we use to load the above. It is not itself a tracker and sets no cookies of its own, but it is what allows measurement tags to be added or changed without rebuilding the site. It sits behind the same consent: nothing is loaded, and no tag inside it can run, unless you accept.

We use these for measurement only. We have not enabled Google advertising features, and we do not use them to build advertising profiles or track you across other websites. This is enforced technically as well as by policy: your acceptance permits analytics storage and nothing else, so an advertising tag added through Tag Manager would remain blocked until this notice changed to say otherwise. Where you consent, data is processed by Google, which may involve transfers outside the UK under Google’s standard contractual clauses.

Changing your mind. You can turn analytics cookies on or off at any time using the Analytics cookies control at the bottom of any page. Turning them off stops any further use and expires the cookies already on your device. Your choice is remembered in your browser’s local storage, not in a cookie, so clearing your site data will bring the banner back.

A small amount of other information is kept in your browser and never sent anywhere: your light/dark appearance preference, your cookie choice, and — for the length of a single visit — the page you arrived on, so that an enquiry can be attributed to the link that brought you here.

7. How we use your data

We use enquiry data to reply to you, understand your project, and — if we work together — to manage that relationship. Our lawful bases are typically:

• Legitimate interests — responding to business enquiries and operating our website securely
• Consent — where you tick the form consent box to allow us to process your enquiry
• Contract — if we later enter an agreement with you and need your details to deliver the work

We do not sell your data. We will not use contact form submissions for marketing emails unless you clearly ask us to, or we obtain a separate opt-in.

8. How long we keep it

• Prospective enquiries — kept for up to 12 months after the last meaningful contact, then deleted unless we still need them for an ongoing conversation
• Clients — kept for the life of the project relationship, then for up to 6 years afterwards where needed for contracts, accounting, or legal claims

9. Where we store data

Enquiry emails are delivered by Resend, our email delivery provider, and arrive in a Microsoft 365 mailbox. Both may process data on servers outside the UK. Where that happens, we use providers that offer appropriate safeguards (for example standard contractual clauses) so your data remains protected to a UK-adequate standard.

We take practical steps to keep data secure, including access controls and encrypted connections to our site and email tools.

10. Sharing your data

We only share personal data with services that help us run the business — for example website hosting and transactional email — and only as needed for those purposes. We do not share your data with third parties for their own marketing.

We may disclose data if required by law, a court order, or a competent authority.

11. Accessing your data

You can request a copy of the personal data we hold about you by emailing hello@wonderfulweb.co.uk. We aim to respond within one month. Complex requests may take longer — we will keep you updated if that happens. There is usually no fee unless a request is clearly excessive or repetitive.

12. How to contact us

For anything related to privacy or this notice:

Wonderful Web
Daniel Hobson, Founder
hello@wonderfulweb.co.uk
United Kingdom

13. Changes to this notice

We may update this page when our practices or the law change. The latest version will always be published here, with the date below.