1. Introduction

We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. 

This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.

Data controller

The data controller responsible for this website is Spoton.net Limited. Our Data Protection Officer is Oscar Akiki, who can be contacted at Broadwalk House, Southernhay West, Exeter, EX1 1TS.

This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.

Lawful basis for processing

For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.

Individual rights

The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.

Security

The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website. Additional technical measures are described at the relevant points in this privacy policy.

Disclosures

In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.

Changes to this privacy policy

We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.

2. Cookies

Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as shopping baskets or password-protected areas. For more information on the cookies we use, see our cookie policy.

3. Data collected when you contact us

Comments

When you submit a comment through a ‘Leave a comment’ form on our site, we collect your name, e-mail address, and comment. We may choose to publish your name and comment on our site. Comments are submitted to the Akismet anti-spam service in order to detect and block spam. For more information on how Automattic (the operator of Akismet) handles the data it collects, see Automattic’s privacy policy

You can delete a comment by contacting us with your request.

Lawful basis for processing: Consent given by data subject

Why? You have given your consent by ticking the box on the ‘Leave a comment’ form

Contact forms

When you submit your details through a contact form on our site we collect your name, postcode, telephone number, email address, information about how you heard about us, and your message. We will store this data within our email client and pass your details on to your local it’seeze website consultant who will contact you to discuss your website needs. Your contact information will then be stored in our CRM system for 6 months prior to deletion, along with records of any further correspondence.

Lawful basis for processing: Consent given by data subject

Why? We will use your personal data to send you more information about our web design services as requested.

Cancellation form

When you submit your details through the cancellation form on our site we collect the name of your business, your website reference number, the reason you are cancelling, whether you wish to keep your domain name(s), and how likely you are to recommend our service. We will store this data within our email client and admin system. This data will also be collated through Typeform. For more information on how Typeform handles the data it collects, see their privacy policy: https://admin.typeform.com/to/dwk6gt

Lawful basis for processing: Performance of a contract

Why? We will use your personal data to process your cancellation request.

Job applications

When you complete a job application form on our site, we collect your name, telephone, email address, covering letter, and CV. We will use this data to contact you about the position if we feel you are a suitable candidate. We will store this data within our email client for 6 months prior to deletion.

Lawful basis for processing: Consent given by data subject

Why? We will use your personal data to contact you about the job vacancy that you have applied for.

Newsletter form

When you submit your details through the ‘sign up for our monthly newsletter’ form on our site we collect only your email address and your confirmed consent to receive these monthly emails. We will store this data within Mailchimp. You can unsubscribe from these emails at any time using the unsubscribe link within every email. For more information on how Mailchimp handles the data it collects, see their privacy policy: https://mailchimp.com/legal/privacy/

Lawful basis for processing: Consent given by data subject

Why? Following your explicit consent, we will use your personal data to send you monthly emails containing information about web design, including advice and tips.

Website audit/health check request

When you submit your details through a ‘Website audit request’ or ‘Website health check’ form on our site we collect your name, postcode, telephone number, email address, and website address. We will store this data within our email client and pass your details on to your nearest it’seeze franchise who will send you your free report via email. Your contact information will then be stored in our CRM system for 6 months prior to deletion, along with records of any further correspondence.

Lawful basis for processing: Consent given by data subject

Why? We will use your personal data to send you a report detailing the performance of your website, as requested.

4. Data collected by third parties on our behalf

Spoton.net

Our site is hosted by Spoton.net Limited (registered company number 06139437 in England and Wales). Spoton.net logs all requests in order to determine the causes of reported faults and to detect and block suspicious traffic. The log records the time of the request, your IP address, the requested resource, the referring site (if specified by your browser), and your browser’s user agent string (which will usually include the name and version of your browser and operating system). Log files are deleted after ninety days.

Lawful basis for processing: Compliance with a legal obligation

Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data

Cloudflare

Our site is served through Cloudflare. Cloudflare helps our site load faster by storing copies of our content in data centres around the world, and defends our site from attacks by logging requests to detect and block suspicious traffic. For more information on how Cloudflare handles the data it collects, see Cloudflare’s privacy policy.

Lawful basis for processing: Compliance with a legal obligation

Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data

Google Ads

We use Google Ads to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Google collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s Business Data Responsibility Site.

To opt out of Google Ads tracking on our site, see the Google Ads section of our cookie policy. To opt out of Google Ads tracking on all sites, see Google’s Ad Settings.

Lawful basis for processing: Pursuance of our legitimate interests

Why? To allow us to analyse the effectiveness of our advertising

Hotjar

We use Hotjar to track visitor interaction with our site in order to produce statistical reports. Hotjar collects details of the pages you view and the time you viewed them, how you interacted with those pages, the features of your browser, and your IP address. For more information on how Hotjar handles the data it collects, see Hotjar’s privacy policy.

To opt out of Hotjar tracking on our site, see the Hotjar section of our cookie policy.

Lawful basis for processing: Pursuance of our legitimate interests

Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services

LinkedIn Insight

We use LinkedIn Insight to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. LinkedIn collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how LinkedIn handles the data it collects, see LinkedIn’s privacy policy.

To opt out of LinkedIn Insight tracking on our site, see the LinkedIn Insight section of our cookie policy.

Lawful basis for processing: Pursuance of our legitimate interests

Why? To allow us to analyse the effectiveness of our advertising

Meta Pixel

We use Meta Pixel to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Meta collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Meta handles the data it collects, see Meta’s privacy policy.

To opt out of Meta Pixel tracking on our site, see the Meta Pixel section of our cookie policy. To opt out of Meta Pixel tracking on all sites, see Meta’s Ad Preferences.

Lawful basis for processing: Pursuance of our legitimate interests

Why? To allow us to analyse the effectiveness of our advertising

Tidio chat widget

When you view a page containing the Tidio chat widget, your browser connects to Tidio. When you chat with us your messages are sent to Tidio and then shared with us, and our responses are sent to Tidio and then shared with you. For more information on how Tidio handles the data it collects, see Tidio’s privacy policy.

Lawful basis for processing: Consent given by data subject

Why? You have sent us a message in the expectation of receiving a reply

5. Other data collected by third parties

Facebook page widget

When you view a page containing the Facebook page widget, your browser connects to Facebook. For more information on how Facebook handles the data it collects, see Facebook’s privacy policy.

Vimeo video player

When you view a page containing the Vimeo video player, your browser connects to Vimeo. For more information on how Vimeo handles the data it collects, see Vimeo’s privacy policy.

YouTube video player

When you view a page containing the YouTube video player, your browser connects to YouTube. For more information on how Google (the operator of YouTube) handles the data it collects, see Google’s privacy policy.