Privacypolicy

Last updated 24 September 2026

Who we are

The Website Factory London Ltd (company number 13267178) is the data controller for personal information collected through this website and in the course of our services. Our registered office is 124 City Road, London EC1V 2NX, United Kingdom. You can contact us about privacy at design@thewebsitefactory.london.

What we collect and why

When you email us

We keep your name, email address, and the content of your message so we can reply and, if you become a client, deliver our services. Our lawful basis is our legitimate interest in responding to enquiries and, where a contract follows, performance of that contract.

When you use this website

This website has no contact forms, accounts or tracking of individuals. Our hosting provider records standard server logs (IP address, browser type, pages requested, time) for security and to keep the site running. Logs are kept for a limited period and are not used to identify visitors.

Cookies and embedded content

The contact page includes a map embedded from Google Maps, which may set cookies and collect usage data under Google's privacy policy. Fonts are loaded from Google Fonts, which involves a request to Google's servers. If we use an analytics service, it will be configured to anonymise IP addresses and will be listed here. A small cookie banner remembers that you have seen our cookie notice; it holds no personal data.

As a client

To deliver websites, systems, hosting and support we process business contact details, account credentials you give us for platforms we manage, billing information, and any data held in systems we build or host on your behalf. Where we host or maintain a system that holds your customers', students' or patients' data, we act as your data processor under a written agreement and process that data only on your instructions.

Who we share it with

We do not sell personal data. We share it only with providers we need to deliver our services, such as hosting platforms (AWS, DigitalOcean, Google Cloud, Bluehost, SiteGround, Hostinger), email providers (Microsoft 365, Google Workspace), payment processors and our accountants, each bound by their own data protection terms. Where data leaves the UK, we rely on the UK adequacy regulations or standard contractual clauses.

How long we keep it

Enquiry emails: up to two years after our last contact. Client records: for the length of the relationship and six years afterwards for legal and accounting reasons. Server logs: typically 30 to 90 days. Data in systems we host for clients: as long as the client instructs.

Your rights

Under UK GDPR you can ask us to confirm what personal data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to provide a copy in a portable format. Email design@thewebsitefactory.london and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

We protect data with access controls, encryption in transit and at rest where supported, multi-factor authentication on our accounts, and regular backups. No system is perfectly secure; if we become aware of a breach affecting your data we will tell you and, where required, the ICO without undue delay.

Changes

We will update this policy when our practices change and show the date at the top of the page.