How SebsWebs handles personal information.

Who is responsible for your information

Seb Banham, trading as SebsWebs, is the data controller for personal information collected through this website and during website projects. For privacy questions or requests, email sebybanham@gmail.com.

Information collected

• Your name, email address and any other contact details you choose to provide.
• Business type, business town or area, website needs, package interest and enquiry messages.
• Project correspondence, quotes, approvals, invoices and support requests.
• Files and content supplied for a website project, such as logos, photographs, page text and business details.
• Website, domain, hosting or account information needed to deliver or support a project where you choose to provide it.
• Limited technical information passed to service providers when you visit the site or submit the form, such as an IP address, browser information and submission time.

Please do not send passwords, payment-card details, special-category personal data or other sensitive information through the public quote form.

Why information is used and the lawful bases

• Enquiries and quotes: to respond to you, understand the requested work and prepare a quote. The lawful basis is taking steps at your request before entering into a contract and, where that does not apply, SebsWebs' legitimate interest in responding to genuine business enquiries.
• Website projects and support: to deliver agreed work, communicate about the project, manage revisions, launch websites and provide support. The lawful basis is performance of a contract.
• Business and financial records: to keep invoices, payment records and evidence of agreed work. The lawful bases are legal obligation and legitimate interests in managing the business and resolving disputes.
• Security and misuse prevention: to prevent spam, protect accounts and investigate technical or security problems. The lawful basis is legitimate interests in keeping SebsWebs and its services secure.
• Portfolio use: to show completed public-facing work where permitted by the project terms. The lawful basis is legitimate interests in demonstrating previous work. Clients can object or ask for a project not to be shown.

SebsWebs does not sell personal information and does not currently use enquiry details for newsletters or automated marketing.

Service providers and sharing

Information is only shared where needed to operate the website, communicate with you, deliver a project, meet a legal obligation or protect legal rights. Current provider categories include:

• FormSubmit: processes quote-form submissions before delivering them by email.
• Google Gmail: stores and delivers enquiry and project email.
• GitHub Pages: hosts the public SebsWebs website.
• Domain, hosting, website and email providers: used where needed for a particular client project.
• Professional or public authorities: where disclosure is required by law or reasonably necessary for accounting, legal claims, fraud prevention or security.

Some providers may process information outside the United Kingdom. Where this happens, SebsWebs will use providers that offer an appropriate transfer safeguard or another lawful transfer mechanism under UK data-protection law.

Cookies and website analytics

The current SebsWebs website does not use advertising, behavioural analytics or non-essential analytics cookies. The quote-form provider may use limited technical or anti-spam measures needed to process and protect a submission. If analytics or marketing technologies are added later, this notice and any required consent controls will be updated before they are enabled.

How long information is kept

• Enquiries that do not become projects are normally deleted within 12 months of the last meaningful contact.
• Project correspondence, approvals and files may be retained for up to six years after completion where needed for contract administration, support, legal claims or business records.
• Invoices and payment records may be retained for up to six years after the relevant financial year, or longer where the law requires it.
• Temporary login details or access credentials should be removed after handover unless ongoing management has been agreed.
• Information may be deleted earlier where it is no longer needed and there is no legal or contractual reason to keep it.

Security

SebsWebs uses reasonable technical and organisational measures to protect information, including access controls, account security, limited access to project information and deletion of information that is no longer needed. No internet or email system is completely risk-free, so sensitive information should not be sent through the public form.

Your rights

Depending on the circumstances, you may have the right to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, transfer of information you provided, or to object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

To make a request, email sebybanham@gmail.com. SebsWebs may need to confirm your identity before releasing or changing information.

Complaints

You can contact SebsWebs first so the issue can be investigated. You also have the right to complain to the UK Information Commissioner's Office through its official website at ico.org.uk.

Changes to this notice

This notice may be updated when the website, service providers or data-handling practices change. The latest version will be published on this page with a revised update date.