Privacy Policy

1. Who we are

KirbyTech (“we”, “us”, “our”) is a web design and digital marketing business based in Brighton, East Sussex. We build websites, manage Google Business Profiles, and provide local SEO services for businesses across the UK.

The data controller is Christopher Kirby, trading as KirbyTech (sole trader), registered with the Information Commissioner's Office under reference ZC276273.

2. What data we collect

We only collect data that you voluntarily provide to us or that is automatically generated as a result of your visit to our website.

• Contact form submissions

  Name, email address, phone number (optional), company name (optional), the service you are interested in, and the content of your message.

• Free website and Google review form

  Your name, business name, website or Google Business Profile address, and the mobile number or email address you ask us to use when we send the review.

• Email correspondence

  Any information you include when you email us directly at contact@kirbytech.co.uk.

• Usage data

  If you consent to analytics cookies, Google Analytics collects anonymised data including pages visited, time on site, browser type, and general geographic region.

3. How we use your data

We use the information we collect for the following purposes:

• To respond to your enquiry, contact form or free website and Google review request
• To provide the services you have engaged us for
• To send you relevant project updates or invoices
• To understand how visitors use our site (only with your consent, via Google Analytics)
• To comply with legal obligations

We will never sell, rent, or trade your personal data with third parties for their own marketing purposes.

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases when processing your personal data:

• Legitimate interests

  To respond to enquiries and run our business effectively.

• Contract performance

  To deliver the services you have requested from us.

• Legal obligation

  To comply with applicable UK laws and regulations.

• Consent

  For analytics cookies (Google Analytics). You can accept or reject cookies via our consent banner, and change your preference at any time.

5. Cookies

When you first visit our site, a banner asks whether you accept analytics cookies. No analytics cookies are loaded unless you click “Accept”. You can change your preference at any time using the Cookie settings link in the footer.

• No advertising or retargeting cookies are used.
• Google Analytics is configured with IP anonymisation enabled.
• Your consent preference is stored in your browser's local storage (not as a cookie).

6. Third-party services

We use the following third-party services in the operation of our website. Each has its own privacy policy and data processing terms.

7. Data retention

We retain contact form submissions, free-review requests and email correspondence for up to 24 months, after which they are securely deleted unless we have an ongoing contractual relationship with you that requires us to keep the records longer. Google Analytics data is retained for 14 months. You may request deletion at any time (see Your rights below).

8. Data security

We take reasonable technical and organisational precautions to protect your personal data against accidental loss, misuse, or unauthorised access. Contact form and free-review submissions are emailed to us through Resend. They are not stored in a database on this website. All data in transit is encrypted using TLS.

9. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for us to keep it.
• Right to restrict processing: Ask us to pause processing your data in certain circumstances.
• Right to data portability: Receive a copy of your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (for example analytics cookies), you may withdraw it at any time with the Cookie settings link in the footer.

To exercise any of these rights, please email contact@kirbytech.co.uk. We will respond within 30 days. There is no charge for reasonable requests.

10. Complaints

If you believe we have handled your data incorrectly, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk — telephone 0303 123 1113.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will always reflect the most recent version. Continued use of our website after changes are posted constitutes acceptance of the updated policy.