Privacy Policy

How we collect, use, and protect your personal information

1. Introduction

Cumbria Web Design ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Name and contact details (email address, phone number, address)
  • Business information (company name, job title)
  • Website usage data and analytics
  • Communication preferences
  • Payment information (processed securely through our payment providers)

2.2 How We Collect Information

We collect information through:

  • Direct interactions (contact forms, consultations)
  • Automated technologies (cookies, analytics)
  • Third parties (payment processors, analytics providers)

3. How We Use Your Information

We use your personal information to:

  • Provide and maintain our services
  • Process your requests and transactions
  • Communicate with you about our services
  • Improve our website and services
  • Comply with legal obligations
  • Send marketing communications (with your consent)

4. Legal Basis for Processing

Under GDPR, we process your data on the following legal bases:

  • Contract: To fulfill our obligations to you
  • Consent: When you explicitly agree to data processing
  • Legitimate interests: To improve our services and communicate with you
  • Legal obligation: To comply with UK laws

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including legal, accounting, or reporting requirements. Typically, we retain data for:

  • Active clients: Duration of service plus 7 years
  • Inactive clients: 7 years from last contact
  • Marketing data: Until consent is withdrawn

6. Your Rights

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • SSL encryption for data transmission
  • Secure servers and data storage
  • Regular security assessments
  • Staff training on data protection
  • Access controls and authentication

8. Cookies and Tracking

We use cookies and similar tracking technologies to improve your browsing experience. You can control cookie settings through your browser preferences. Essential cookies cannot be disabled as they are necessary for website functionality.

9. Third-Party Services

We use the following third-party services:

  • Google Analytics (website analytics)
  • Payment processors (Stripe, PayPal)
  • Email marketing platforms
  • Cloud hosting providers

10. International Data Transfers

We primarily store and process data within the UK and EEA. Any international transfers comply with GDPR requirements and appropriate safeguards.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through our website or email.

13. Contact Us

For any questions about this Privacy Policy or your data rights, please contact us at:

  • Email: support@cumbriaweb.co.uk
  • Phone: 07353538224

Last updated: 21 May 2025