Privacy Policy

Bakewell Digital ("we", "us", "our", "me", "I") provides various web services, including, web development, hosting & maintenance and data services. This Privacy Policy explains how we collect, use, share and protect personal data, and your rights under the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018.

We collect and process personal data necessary to deliver our services and operate our website. Typical categories:

• Contact details: name, job title, email, phone.
• Company details: business name, address, company registration number (if provided).
• Billing data: invoicing address, bank details (for payments only - see below).
• Technical and usage data: IP address, device and browser information, cookies and analytics (from website visitors).
• Analytics data: anonymized website usage data collected via Google Analytics with consent.
• Project data: content, files, and data you provide for scraping, lists, or site content (may include personal data about third parties where you ask us to process it).
• Support & communications: emails, chat transcripts, notes from calls.

We process personal data on the following lawful bases:

• Contractual necessity - to provide services, perform contracts and manage payments.
• Legitimate interests - for limited business admin, fraud prevention, and marketing to clients/prospects where our interest does not override individual rights.
• Consent - where we ask for explicit consent (e.g., non-essential cookies).
• Legal obligation - to comply with tax or regulatory requirements.

• To provide, manage and maintain client projects (design, development, hosting, maintenance).
• To process payments and issue invoices.
• To respond to enquiries, support requests and legal requests.
• To run website analytics and improve site performance (with cookie/consent controls).
• To analyze website usage and improve user experience (with consent).
• To perform data services requested by clients (e.g., lawful public data scraping, lead generation, cleaning and transformation) - see Section 8.

When you submit our contact form, we collect the following information:

• Name, email address, subject, and message content
• IP address and submission timestamp (for security purposes)

Purpose: To respond to your inquiry and provide requested information about our services.

Legal Basis: Legitimate interest in responding to business inquiries.

Retention: Contact form submissions are retained for 12 months or until the inquiry is resolved, whichever is longer.

Your Rights: You can request deletion of your contact form data at any time by emailing james@bakewelldigital.com.

When we process data as part of a client project, we act either as:

• Data controller - where we determine the purposes and means (e.g., our own marketing lists), or
• Data processor - where we process data strictly on client instructions (e.g., scraping public data for a client, cleaning or normalising a client's leads).

If we act as a processor we will deal with personal data only on written instructions and will put in place a written data processing agreement (DPA) with the client.

Where we provide data collection/scraping services, we will:

• Use lawful, publicly available sources only and comply with website terms of service and applicable laws.
• Not use techniques to circumvent paywalls or restricted content.
• Provide a clear description of data sources and methods to the client and require clients to confirm lawful downstream use.

Any data scraping or lead-generation work is completed under a separate scope and must be authorised in writing by the client.

We do not sell personal data.

We may share personal data with: payment processors (e.g., PayPal), hosting providers (e.g., Hostinger, AWS), Google Analytics (for website analytics with consent), and subcontractors engaged to deliver services. We use data processors with appropriate contracts.

If personal data is transferred outside the UK/EEA, we will take appropriate safeguards.

We retain personal data only as long as necessary to fulfil the purpose, or as required by law:

• Client project records & billing: minimum 6 years for tax purposes.
• Marketing lists: until consent withdrawal or 36 months of inactivity.
• Analytics: aggregated where possible; raw logs retained for 12 months.

We use technical and organisational measures: TLS on websites, access controls, encrypted backups, regular updates, and secure credential storage. Where we use third-party hosting or processors we require reasonable security measures via contracts.

You have rights including access, rectification, erasure, restriction, objection and data portability. To exercise rights contact: james@bakewelldigital.com. You also have the right to lodge a complaint with the ICO: https://ico.org.uk

This website uses cookies to enhance your experience and analyze site traffic. We use the following types of cookies:

• Essential cookies: Required for basic site functionality and security. These include WordPress session cookies and security tokens. Essential cookies do not require consent under UK GDPR and PECR.
• Analytics cookies: Google Analytics cookies that help us understand how visitors interact with our site. These collect information about pages visited, time spent on site, and general usage patterns. No personally identifiable information is collected.

Google Analytics Details:

• We use Google Analytics 4 (GA4) to collect anonymized usage data
• Data is processed in accordance with Google's Privacy Policy
• IP addresses are anonymized to protect privacy
• Data is retained for 14 months by default

Your Choices:

• You can accept or reject analytics cookies via our cookie banner
• You can change preferences at any time in your browser settings
• You can opt out of Google Analytics using Google Analytics Opt-out Browser Add-on

For more information about Google Analytics privacy, visit Google's Privacy Guide.

We may update this Policy; material changes will be highlighted on the site and date-stamped.

If you have concerns about our use of your data, contact us. You may also complain to the Information Commissioner's Office.