Privacy Policy

This policy explains how Sephton Connect ("we", "us", "our") collects, uses and protects personal data when you visit this website or use our services, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Sephton Connect is the data controller for the personal data described in this policy.

• Trading name: Sephton Connect, operated by George Sephton (sole trader)
• Contact email: sephtonconnect@gmail.com

What personal data we collect

We collect personal data when you interact with this website or become a client, including:

• Contact details you submit through our enquiry, quote or audit request forms, such as your name, business name, trade, phone number, email address, and any details you choose to share about your business.
• Correspondence you send us by email, phone, or messaging.
• Technical data such as IP address, browser type, and pages visited, collected automatically when you use the site.
• Billing and account information if you become a paying client, such as your business address. We don't currently process online payments; if that changes, we'll update this policy to name our payment provider.

How we collect it

• Directly from you, when you fill in a form, request a free website audit, or contact us.
• Automatically, through standard web server logs and any analytics tools we use. See "Cookies" below.

Why we use it and our legal basis

We use your personal data to:

• Respond to enquiries and provide the free website audit or quote you've requested, on the basis of steps taken at your request prior to a contract.
• Design, build, host and maintain your website if you become a client, for the performance of our contract with you.
• Send you service related communications, such as updates about your site or account, for the performance of our contract and our legitimate interest in keeping you informed.
• Send marketing communications about our services, only where you've given consent, which you can withdraw at any time.
• Keep records for accounting, tax and legal compliance, where we have a legal obligation to do so.
• Improve this website and our services, on the basis of our legitimate interest in running an effective business.

Who we share it with

We don't sell your personal data. We share it only where necessary, with:

• Service providers who help us operate our business, such as our hosting provider Netlify and email provider Google (Gmail).
• Professional advisers such as accountants or solicitors, where required.
• Law enforcement or regulators, where we're legally required to.

Any third party we share data with is required to protect it and use it only for the purposes we specify.

International transfers

Where any of our service providers store or process data outside the UK or European Economic Area, we make sure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses.

How long we keep it

We keep enquiry and audit request data for as long as reasonably necessary to follow up, and no longer than 24 months if you don't become a client. Client account and billing data is kept for the duration of our service relationship, plus a further period required by tax law, currently six years in the UK.

Cookies

This website does not use cookies of any kind, essential or otherwise, and does not use analytics or advertising tracking. If that changes, we'll update this policy and ask for your consent through a cookie banner before setting any non essential cookies.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data, in certain circumstances.
• Restrict or object to our processing of your data.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk, if you're unhappy with how we've handled your data.

To exercise any of these rights, contact us at sephtonconnect@gmail.com.

Keeping your data secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, restricted access to client data, and encrypted data transmission (SSL/TLS) across this website.

Children

Our services are directed at business owners, and we don't knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

Contact us

If you have any questions about this policy or how we handle your data, contact us at sephtonconnect@gmail.com.