Privacy policy

1. Who is responsible for your data

The controller of your personal data is Lovemyweb LTD, 89 Oxgangs Farm Avenue, Edinburgh EH13 9PU, United Kingdom (the “Controller”). For anything about your personal data, email web@lovemyweb.com.

2. What data I process and why

Contact forms and the brief

When you send a form, I process your email address, your name if you give it, your phone number if you give it, and your answers (for example what you need, your current website, how your business works and a rough budget), so I can reply and prepare a proposal (UK GDPR Article 6(1)(b) - steps taken at your request before a contract, and Article 6(1)(f) - legitimate interest in handling correspondence).

Together with the form I record technical details: the page the form was sent from, the landing page, the referring page, UTM campaign parameters, your IP address, browser type, approximate location (country, city) and the time of sending. They help prevent abuse and show which channels bring enquiries (Article 6(1)(f)). They are kept only for the current visit in your browser and are not stored in cookies.

Form protection - Cloudflare Turnstile

The forms are protected by Cloudflare Turnstile, an invisible check of whether a person is sending the message. To do this, Cloudflare processes data about your device and browser (Article 6(1)(f) - protection against spam). Turnstile is covered by Cloudflare's Turnstile Privacy Addendum.

Running the website

The website is hosted on Cloudflare's infrastructure, which processes technical data (such as your IP address) to deliver and secure the pages (Article 6(1)(f)). This website does not use Google Analytics, advertising pixels or any other tracking tools.

3. Who receives the data

Data may go to companies that help me run the website and reply to enquiries:

• Cloudflare, Inc. - hosting, security and Turnstile,
• Celonis SE / Make - forwarding form submissions,
• the email and office tool providers I use for correspondence.

4. Transfers outside the UK

The Controller is based in the United Kingdom. Some providers may also process data in other countries, in particular the United States. This happens under UK adequacy regulations (including the UK Extension to the EU-U.S. Data Privacy Framework) or the International Data Transfer Agreement / Addendum approved for the UK.

5. How long I keep data

• form data - for as long as we are in touch, then up to 3 years or until any claims are time-barred,
• cookies - for the period shown in the table below.

6. Your rights

You have the right to access your data, correct it, delete it, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.

Giving your details in the forms is voluntary, but without an email address I can't reply. I don't make decisions about you based solely on automated processing.

7. Cookies

Cookies are small files saved in your browser. This website only uses cookies that are strictly necessary for it to work and stay secure, so it doesn't ask for consent.

You can delete or block cookies in your browser settings.

8. Changes to this policy

This policy may change as the website grows or the law changes. The current version is always on this page, with the date of the last change at the top.