Privacy Policy.

Who we are

White Arc is a freelance web development, digital marketing and SEO studio based in Wales, operating as a sole trader. For the purposes of UK data protection law, White Arc is the data controller responsible for your personal data.

Our website address is https://www.whitearc.co.uk.

If you have any questions about this policy or about how we handle your information, you can contact us at contact@whitearc.co.uk.

Information you give us

When you complete our contact or enquiry form, you may give us:

• Full name
• Email address
• Phone number
• The service you are interested in
• Your message or project details

If you go on to engage White Arc for a project, we also collect the information we need to deliver and invoice the work, such as your business and billing details.

Information we collect automatically

As you browse the site, we automatically record some technical details about your device and session, such as:

• IP address
• Browser and version
• Operating system
• Pages viewed and time spent on them
• Date and time of your visit

This is gathered through analytics tools, including Google Analytics. See the Cookies section below.

How we use your information

We use your information to:

• reply to your enquiries and help you,
• prepare quotes and proposals for the work you are asking about,
• run and maintain the services we offer,
• send invoices and updates about work we are carrying out for you,
• keep our website and services working well and make them better,
• understand how visitors find and use the site,
• send you marketing, where you have opted in,
• meet our legal and regulatory obligations.

Our lawful basis

Under UK GDPR we must have a lawful basis for processing your data. We rely on:

• Legitimate interests, to respond to enquiries, run and secure our website, and understand how it is used.
• Consent, where you opt in, for example to analytics cookies or marketing.
• Contract, where we are providing services to you, or taking steps at your request before entering into an agreement.

We never sell your personal data.

Cookies

Cookies are small text files placed on your device. Our site uses:

• Essential cookies that are needed for the site to function and cannot be switched off.
• Analytics cookies, set through Google Analytics, that help us measure how the site is used so we can improve it. These are only set where you have given consent through our cookie banner.

You can control or delete cookies through your browser settings, or through the consent banner on our site. Blocking some cookies may affect how the site works.

Who we share your data with

We do not sell or rent your personal data. We share it only with the service providers who help us run our website and business, and only as far as is necessary. These fall into a few categories:

• Hosting and infrastructure providers that store and serve the website.
• Email and form delivery services that handle the messages you send through the site.
• Analytics and search providers, namely Google, through Google Analytics and Google Search Console, which help us understand how the site is found and used.
• Professional and legal advisers, or relevant authorities, where we are required to share data by law.

Each of these is required to handle your data securely. We do not list individual suppliers here, as they may change from time to time, but we are happy to tell you who they are on request.

How long we keep your data

• Enquiry and contact data is kept while we are in contact and for a reasonable period afterwards, then deleted, unless it forms part of a client relationship we are required to keep records for.
• Client records are kept for as long as we work together, and afterwards for as long as the law requires, for example for tax and accounting purposes (generally up to six years).

What rights you have over your data

Under UK data protection law you have the right to:

• access the personal data we hold about you,
• ask us to correct data that is inaccurate or incomplete,
• ask us to erase your personal data,
• restrict or object to how we process your data,
• request your data in a portable format,
• withdraw your consent at any time, where we rely on consent.

This does not include any data we are obliged to keep for administrative, legal or security purposes. To exercise any of these rights, contact us at contact@whitearc.co.uk. We will respond within one month.

Where your data is sent

Where any of our providers process data outside the UK, we take steps to ensure it remains protected to UK standards.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date at the top.

Complaints

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at any time. You can reach them at www.ico.org.uk. We would ask, though, that you give us the chance to sort things out first, so please come to us before going to the ICO.