Legal
Privacy notice
The short version: we collect what you type into our enquiry forms so we can reply to you. We don't sell it, we don't use it for advertising, and you can ask us to delete it at any time.
1. Who we are
IWCreator is a web design studio operating from the United Kingdom. For the purposes of UK data protection law we are the data controller for information collected through this website.
You can reach us using the contact form on any page of this site.
2. What we collect
We only collect what you give us. We don't buy data, scrape it, or build profiles.
| Where | What |
|---|---|
| Project enquiry form | Name, business name, email, phone, sector, current website, package interest, brand status, page count, functionality needed, timescale, and anything you write in the message field. |
| Build plan form | Name, business name, email, phone, plus your answers about sector, starting point, brand, functionality and size. |
| Contact form | Name, email and your message. |
| Automatically | Aggregated, non-identifying analytics — pages viewed, referring site, country, device type. See Cookies. |
We do not ask for and do not want special category data — health, ethnicity, political views, and so on. Please don't include any in a message field.
3. Why we use it
- To reply to your enquiry — quoting, asking follow-up questions, or telling you honestly that we're not the right fit.
- To prepare a build plan where you've requested one.
- To understand which parts of the site produce enquiries — we record which button you came from, but this is not linked to advertising.
- To keep records of quotes issued and work agreed.
We will not add you to a marketing list because you sent an enquiry. If we ever start a newsletter, you'll have to ask for it.
4. Lawful basis
| Purpose | Basis |
|---|---|
| Replying to your enquiry | Consent, given by ticking the box on the form, and legitimate interests in responding to someone who has contacted us. |
| Delivering work you've engaged us for | Performance of a contract. |
| Keeping financial records | Legal obligation. |
| Site analytics | Legitimate interests in understanding how the site performs, using privacy-preserving analytics that don't identify you. |
5. Who we share it with
We use a small number of processors to run the business. Each only receives what it needs.
| Processor | Purpose |
|---|---|
| Cloudflare | Hosting, security and privacy-first analytics. |
| Form and email provider | Delivering enquiry notifications and our reply to you. |
| Accountant | Financial records, where you become a client. |
We do not sell your data, and we do not share it with advertisers. Where a processor operates outside the UK, transfers are covered by an adequacy decision or standard contractual clauses.
6. How long we keep it
- Enquiries that don't become projects — 24 months, then deleted.
- Client records — for the length of the engagement and 7 years afterwards, to meet HMRC requirements.
- Analytics — aggregated only, never tied to you.
7. Your rights
Under UK GDPR you have the right to:
- Ask what we hold about you, and get a copy
- Have inaccurate information corrected
- Ask us to delete it
- Object to or restrict how we use it
- Ask for it in a portable format
- Withdraw consent at any time
Use the contact form and we'll respond within one month. There's no charge.
8. Cookies
This site does not set advertising or tracking cookies. Full detail is on the cookies page.
9. Security
The site is served over HTTPS. Enquiry data is transmitted encrypted and stored with access limited to those who need it. Forms are protected against automated abuse. No system is perfectly secure, but we don't retain more than we need, which is the most effective protection available.
10. If you're a client of ours
Where we build and host a website for you, and that site collects enquiries from your customers, you are the controller and we act as your processor. That arrangement is governed by the data processing terms in our client agreement, which set out what we may do with that data, how long we keep it, and how it is deleted when you leave.
11. Changes
If we change this notice we'll update the date at the top. Material changes affecting existing clients will be communicated directly.
12. Contact and complaints
Questions or requests: use the contact form on any page.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.