Privacy Policy
In this document “we” or “us” refer to Acorn Web Design, Shepherds Close, Grove, Oxfordshire, OX12 0NX, United Kingdom.
Introduction
This privacy notice explains how we collect, use and protect personal information when you use our website, contact us or use our services.
We take the protection of your privacy and personal information seriously and process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We only collect and use personal information where we have a lawful basis for doing so. We do not sell your personal information to third parties.
The Bases on Which We Process Information About You
Data protection law requires us to have a lawful basis for processing your personal information. The lawful basis we use will depend on why we need the information and our relationship with you.
Information we process because we have a contractual obligation with you
When you purchase or request a service from us, or ask us to take steps before entering into a contract with you, we may need to process personal information in order to provide that service.
This may include information required to:
- respond to an enquiry about our services
- provide a quotation or other information you have requested
- provide services you have agreed to purchase
- communicate with you in relation to those services
- administer payments and maintain appropriate business records
We process this information because it is necessary to take steps at your request before entering into a contract or to perform our contractual obligations to you.
Information we process with your consent
Where we specifically ask for your consent to process your personal information for a particular purpose, we will explain what the information will be used for when we ask for that consent.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Information we process for the purposes of legitimate interests
We may process personal information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
This may include processing necessary for:
- responding to enquiries and communications from you
- maintaining appropriate business and administrative records
- operating, maintaining and securing our website
- preventing fraud, spam, misuse or malicious activity
- investigating and resolving technical or security problems
- protecting and asserting our legal rights
- obtaining professional advice or insurance where necessary
Where we rely on legitimate interests, we consider the nature of the information, the purpose for which it is being processed and the potential impact on your privacy.
Information we process because we have a legal obligation
We may process your personal information where this is necessary to comply with a legal or regulatory obligation.
For example, we may be required to retain certain business or financial records or provide information to law enforcement agencies, courts, regulators or other authorities where we are legally required to do so.
How We Use Information You Provide to Us
Contacting us
When you contact us by telephone, email or through a form on our website, we process the information you provide in order to respond to your enquiry and communicate with you.
This may include your name, contact details, the contents of your message and any other information you choose to provide.
We may retain relevant correspondence where necessary to maintain appropriate business records, provide our services, deal with subsequent enquiries or establish, exercise or defend legal claims.
Complaints
If you make a complaint, we will process the information you provide in order to investigate and respond to your complaint.
Where it is reasonably necessary to resolve a complaint, we may need to share relevant information with another person or organisation. We will only share information that is necessary for this purpose or where we are otherwise required or permitted to do so by law.
Information Collected When You Visit Our Website
Cookies and similar technologies
Cookies and similar technologies
With your consent, we use Google Analytics cookies to help us understand how visitors use our website. These analytics cookies are only set if you choose to accept them.
We use Google reCAPTCHA on our contact forms to help protect the website from spam and abuse. When you use a form protected by reCAPTCHA, Google may process technical information about your device and your interaction with the website for security and fraud-prevention purposes.
Server logs
When you visit our website, our web server may automatically record technical information about your visit, such as your IP address, browser type, device type, pages requested, and the date and time of your request.
This information is used for purposes such as maintaining the security, reliability and performance of the website and investigating technical problems or malicious activity.
Disclosure and Sharing of Your Information
We do not sell your personal information.
We may share personal information with third-party service providers where this is necessary for them to provide services to us, such as website hosting, email, IT, security or other business services.
We may also disclose personal information where required by law, where necessary to protect our legal rights, or in connection with legal proceedings.
Where we use a third-party service provider to process personal information on our behalf, we take appropriate steps to ensure that the information is handled securely and in accordance with applicable data protection law.
International transfers
Some of the service providers used in connection with our website or business may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with UK data protection law and that appropriate safeguards are in place where required.
Google reCAPTCHA is used on our contact forms for spam and abuse prevention. Use of this service may involve information being processed by Google outside the United Kingdom.
Your Rights
Under UK data protection law, you have rights in relation to your personal information. Depending on the circumstances, these may include the right to:
- request access to personal information we hold about you
- ask us to correct inaccurate or incomplete information
- ask us to erase your personal information
- ask us to restrict the processing of your information
- object to certain processing
- request the transfer of your information where the right to data portability applies
- withdraw consent where we rely on consent as our lawful basis
These rights do not apply in every circumstance and there may be legal reasons why we cannot comply with a particular request.
If you wish to exercise any of these rights, please contact us. We may need to ask for information to verify your identity before responding to your request.
Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or loss.
Our website uses HTTPS encryption to protect information transmitted between your browser and the website. You can normally identify an encrypted connection by the padlock or similar security indicator displayed by your browser.
Use of the Site by Children
Our website and services are not directed at children and we do not knowingly collect personal information from children through the website.
How You Can Complain
If you have concerns about how we collect or use your personal information, please contact us so that we have an opportunity to address your concerns.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.
Retention of Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:
- provide services you have requested
- maintain appropriate business and financial records
- comply with legal or regulatory requirements
- resolve disputes
- establish, exercise or defend legal claims
Different types of information may therefore be retained for different periods.
Review of This Privacy Policy
We may update this privacy policy from time to time to reflect changes to our website, services, business practices or legal obligations.
The current version of this privacy policy will be published on this website.
If you have any questions about this privacy policy or how we process your personal information, please contact us.
