Privacy Policy

1. Who we are

KirbyTech (“we”, “us”, “our”) is a web design and digital marketing business based in Brighton, East Sussex. We build websites, manage Google Business Profiles, and provide local SEO services for businesses across the UK.

2. What data we collect

We only collect data that you voluntarily provide to us or that is automatically generated as a result of your visit to our website.

• Contact form submissions

  Name, email address, phone number (optional), company name (optional), the service you are interested in, and the content of your message.

• Email correspondence

  Any information you include when you email us directly at contact@kirbytech.co.uk.

• Usage data

  If you consent to analytics cookies, Google Analytics collects anonymised data including pages visited, time on site, browser type, and general geographic region.

3. How we use your data

We use the information we collect for the following purposes:

• To respond to your enquiry or service request
• To provide the services you have engaged us for
• To send you relevant project updates or invoices
• To understand how visitors use our site (only with your consent, via Google Analytics)
• To comply with legal obligations

We will never sell, rent, or trade your personal data with third parties for their own marketing purposes.

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases when processing your personal data:

• Legitimate interests

  To respond to enquiries and run our business effectively.

• Contract performance

  To deliver the services you have requested from us.

• Legal obligation

  To comply with applicable UK laws and regulations.

• Consent

  For analytics cookies (Google Analytics). You can accept or reject cookies via our consent banner, and change your preference at any time.

5. Cookies

When you first visit our site, a banner asks whether you accept analytics cookies. No analytics cookies are loaded unless you click “Accept”. You can change your preference at any time by clearing your browser's local storage for this site.

• No advertising or retargeting cookies are used.
• Google Analytics is configured with IP anonymisation enabled.
• Your consent preference is stored in your browser's local storage (not as a cookie).

6. Third-party services

We use the following third-party services in the operation of our website. Each has its own privacy policy and data processing terms.

7. Data retention

We retain contact form submissions and email correspondence for up to 24 months, after which they are securely deleted unless we have an ongoing contractual relationship with you that requires us to keep the records longer. Google Analytics data is retained for 14 months. You may request deletion at any time (see Your rights below).

8. Data security

We take reasonable technical and organisational precautions to protect your personal data against accidental loss, misuse, or unauthorised access. Contact form data is stored in a secured database with row-level security controls. All data in transit is encrypted using TLS.

9. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for us to keep it.
• Right to restrict processing: Ask us to pause processing your data in certain circumstances.
• Right to data portability: Receive a copy of your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies), you may withdraw it at any time by rejecting cookies or clearing local storage.

To exercise any of these rights, please email contact@kirbytech.co.uk. We will respond within 30 days. There is no charge for reasonable requests.

10. Complaints

If you believe we have handled your data incorrectly, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk — telephone 0303 123 1113.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will always reflect the most recent version. Continued use of our website after changes are posted constitutes acceptance of the updated policy.