Privacy Policy

Websitelift Ltd is the data controller for the personal data described in this policy. We are registered in England and Wales, company number [COMPANY NUMBER], with our registered office at 218 Lilycroft Road, Bradford BD9 5AL, United Kingdom.

You can contact us about anything in this policy at [email protected].

[If you are required to register with the ICO, add your ICO registration number here. Most UK businesses processing personal data must register and pay the data protection fee.]

When you submit our enquiry form: your name, email address, and optionally your company name, phone number, the service you are interested in, your budget range and the message you write.

When you email or call us: whatever you choose to tell us, plus the record of our correspondence.

When you visit the site: if you consent to analytics cookies, we collect anonymised usage data such as pages viewed, approximate location by country, device type and referring site. We do not collect this without your consent.

We do not collect special category data, and we do not ask for payment details through this website.

To reply to your enquiry and discuss working together. Lawful basis: legitimate interests — you contacted us and expect a response.

To deliver services you have engaged us for. Lawful basis: performance of a contract.

To keep records required for tax and accounting. Lawful basis: legal obligation.

To understand how the site is used and improve it. Lawful basis: consent, which you give or withhold through the cookie banner and can withdraw at any time.

We do not use your data for automated decision-making or profiling, and we do not sell it to anyone. Ever.

We use a small number of service providers who process data on our behalf, under contract and only on our instructions:

[⚠ CONFIRM THIS LIST MATCHES YOUR ACTUAL TOOLS] Resend (email delivery of enquiry forms), Vercel (website hosting), Google Analytics (site usage, only with your consent), and our accountants for invoicing records.

Some of these providers are based outside the UK. Where data is transferred internationally, it is protected by UK adequacy regulations or Standard Contractual Clauses.

We will disclose data if legally required to do so, and we will tell you if that happens unless we are prohibited from doing so.

Enquiries that do not become projects: 24 months, then deleted.

Client records: for the duration of our work together, then 7 years, which is the period HMRC requires for tax records.

Analytics data: 14 months.

You can ask us to delete your data sooner — see your rights below.

Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data deleted; restrict or object to how we use it; receive your data in a portable format; and withdraw consent at any time where consent is our basis for processing.

To exercise any of these, email [email protected]. We will respond within one month, and there is no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

The site is served over HTTPS. Enquiry data is transmitted encrypted and delivered to a mailbox protected by two-factor authentication. Access to client data is limited to the people who need it to do the work.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the ICO within 72 hours, as the law requires.

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use data you have already given us, we will tell you directly.