Privacy Policy

Who we are

Coreframe Digital is a web design and automation business based in Cardiff, Wales, UK. We operate as a sole trader. You can contact us at enquiries@coreframedigital.co.uk.

What data we collect

We collect information you provide and limited technical information needed to operate the website. This includes:

• Your name, email address, and phone number when you submit an enquiry or project-details form
• Your business name and project details (for example what you need, budget range, timeline, and any domain or hosting details you share)
• Technical data via analytics, only if you accept analytics cookies (see below)

We do not collect sensitive personal data, payment card details, or run any user accounts on this website.

How we use your data

Information submitted via our forms is used solely to:

• Respond to your enquiry
• Provide you with a quote or project information
• Follow up on your project if you become a client

We do not use your data for marketing without your explicit consent, and we do not sell your data to any third party.

Enquiry processing and lawful bases

Our website processes enquiries through our own enquiry endpoint, stores them in our business administration system (hosted by Supabase in the EU) and uses Resend to send notification emails. Hosting and email providers process the information needed to provide these services.

We process requested quotes and client work to take steps towards or perform a contract. We rely on legitimate interests to manage business correspondence and protect the website from abuse, legal obligations for required financial records, and consent for optional analytics. Please do not include sensitive information or passwords in an enquiry.

Cookies and analytics

We use Google Analytics 4 to understand how visitors use this website, but only if you accept it. When you first visit, a banner asks whether you're happy for us to set optional analytics cookies. If you decline, or simply ignore the banner, no analytics cookie is set and Google Analytics does not run. Your choice is remembered in your browser and you can change it at any time by clearing this site's data in your browser settings.

When enabled, Google Analytics processes usage information such as pages visited, interactions and approximate location. Analytics identifiers can distinguish browser visits; this information should not be treated as completely anonymous.

Our booking picker uses Google Calendar availability and sends the details you submit to our server to arrange your call and confirmation. Where we offer an embedded Google Calendar instead, it loads only after you choose "Open the calendar". That embedded page may set Google cookies and processes booking details under Google's privacy policy.

Your rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

To exercise any of these rights, email us at enquiries@coreframedigital.co.uk. We normally respond within one month. You can also complain to the Information Commissioner’s Office.

Data retention

Enquiry emails and project correspondence are retained for up to 3 years for business record-keeping purposes, then deleted. If you become a client, financial records are kept for the applicable statutory period. Other project records are retained only as long as needed to deliver the work, handle support or resolve disputes; tax rules do not require us to keep every project file.

Changes to this policy

We may update this policy from time to time. The current version is always available at this URL. Material changes will be noted with an updated date at the top of this page.

Contact

Questions about this policy? enquiries@coreframedigital.co.uk