Privacy policy
Last updated 29 August 2026
This policy explains what personal data Builder Web Design collects when you use this website or contact us, why, how long we keep it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Builder Web Design is a service of Webso Digital, the trading name of Daniel Stoychev, a sole trader based in Wrexham, United Kingdom. Daniel Stoychev is the data controller for the personal data described here.
- Controller: Daniel Stoychev, trading as Webso Digital
- Address: 110 Rhosddu Road, Wrexham, LL11 2NG, United Kingdom
- Email: info@websodigital.com
- Phone: 07591 018609
- ICO data protection register reference: ZC207002
What we collect and why
When you send the quote or contact form
Your name, business name, phone number, email address, the area you cover, your website address if you give one, the type of work you do and anything you write in the message. We use this to prepare the audit and quote you asked for and to reply to you. Lawful basis: taking steps at your request before entering into a contract (Article 6(1)(b)), and our legitimate interest in responding to enquiries about our services (Article 6(1)(f)).
When you phone, email or message us on WhatsApp
Whatever you choose to tell us, plus your number or address. Lawful basis as above. WhatsApp is operated by Meta and has its own privacy terms; we use it as a messaging channel only.
When you browse the site
Our web server records the pages requested, the time, your IP address and browser type in standard access logs, which we use to keep the site secure and working. If you accept analytics cookies, Google Analytics also records how the site is used; see the cookie policy. Lawful basis: legitimate interest in running a secure website, and consent for analytics.
If you become a client
Contact details, the details of your business needed to do the work (for example your Google Business Profile, your website and its accounts), correspondence, invoices and payment records. Lawful basis: performance of the contract and our legal obligations for accounting and tax.
Where the data goes
Form submissions are emailed to us through our email provider (Zoho Mail, servers in the EU) and stored in our own client management system, hosted on a server we control in the EU. Analytics data, if you consent, is processed by Google. We do not sell personal data, we do not share it with marketing companies, and we do not add you to a mailing list because you asked for a quote.
Where we use suppliers who process data on our behalf (email, hosting, analytics), they act under contracts that require them to protect it. Google may process analytics data outside the UK under the UK International Data Transfer Agreement and the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
- Enquiries that do not become clients: 24 months from the last contact, then deleted.
- Client records: for the duration of the work and six years after, for tax and legal purposes.
- Server access logs: 30 days.
- Analytics data: 14 months, the Google Analytics default we have set.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, email info@websodigital.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.
Security
The site is served over HTTPS only, with security headers on every response. Form submissions are checked for abuse before they reach us. Our systems are protected by access controls and two-factor authentication. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we take reasonable steps.
Children
This site is for businesses. We do not knowingly collect data from anyone under 16. If you believe we have, tell us and we will delete it.
Changes
We will update this page when our practices change, and the date at the top will move. Significant changes will be flagged on the site.