Privacy Policy

1. Who we are

MarketGenie (referred to as "we", "us", "our") is a web design agency based in Richmond, London. For the purposes of UK GDPR, we are the data controller for personal data collected through this website and via our services.

2. What information we collect

We collect personal data in the following ways:

• Contact form submissions: name, email, business name, project details, budget range
• Newsletter signups: email address
• Direct correspondence: any information you share via email or phone
• Anonymous analytics: aggregated, non-identifying usage data via Cloudflare Web Analytics

3. How we use your data

We use your personal data to:

• Respond to enquiries and provide quotes
• Deliver agreed services and communicate during projects
• Send occasional newsletters if you've subscribed
• Issue invoices and keep accurate financial records
• Improve our website and services

4. Legal basis for processing

We process personal data on the basis of consent (newsletter), the performance of a contract (active client work), and our legitimate interests (responding to enquiries, basic analytics).

5. Sharing your data

We do not sell your data. We share it only with trusted service providers who help us operate the business — including Formspree (form processing), Google Workspace (email), and Cloudflare (hosting, analytics) — all of whom are bound by their own data protection obligations.

6. Cookies and tracking

We use Cloudflare Web Analytics, which is privacy-first and does not use cookies or collect personal data. We don't use any third-party advertising trackers.

7. Data retention

We keep enquiry data for up to two years unless you become a client, in which case we retain project records for the period required by UK accounting regulations (currently six years). Newsletter subscribers can unsubscribe and have data deleted at any time.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing or withdraw consent
• Request data portability
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, get in touch via our contact page.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access controls, and only using reputable third-party services.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent change.

11. Complaints

If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO). Visit ico.org.uk for more information.