Privacy Policy

Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how Longnewton Web Design (“we”, “us”, “our”) collects, uses and protects personal data when you visit https://longnewtonwebdesign.com, contact us or use one of our managed services. We normally act as controller for information collected about our own clients and prospective clients. When we process a client’s customer information only to provide Review & Enquiry Automation or another managed service, that client is normally the controller and we act as its processor.

Who We Are

Longnewton Web Design
Email: joe@longnewtonwebdesign.com
Phone: +44 7742 975 883
Address: Longnewton House, Long Newton, Stockton-on-Tees, TS21 1BX, United Kingdom

Personal Data We Collect

• Contact details, such as your name, email address and phone number, when you make an enquiry.
• Business details you provide when discussing or commissioning work, such as your business name, website, services and service area.
• Enquiry details and other information you include in a contact form, email or telephone conversation.
• Customer and communication details supplied by a client using Review & Enquiry Automation, such as a customer’s name, email address, telephone number, completed-job information, message status, review-request activity, missed-call information and opt-out preferences.
• Technical information, such as your IP address, browser, device and server-log information generated when you use the website.

How We Use Your Data

We use personal data where necessary:

• To respond to enquiries and provide quotations.
• To plan, deliver and manage website services.
• To operate agreed review requests, reminders, review replies and missed-call text-back workflows on a client’s instructions.
• To process payments, maintain records and meet legal obligations.
• To operate, secure and troubleshoot this website.
• To communicate with clients about their website and service.

Depending on the circumstances, our lawful basis is taking steps before entering a contract, performing a contract, complying with a legal obligation, pursuing our legitimate business interests or acting with your consent.

Contact Forms and Spam Protection

Website enquiries are processed through Netlify Forms. Google reCAPTCHA is used to help protect the forms from spam and abuse. These providers may process technical information needed to deliver and secure those services under their own privacy terms.

HighLevel CRM and Automation

We use HighLevel, also known as GoHighLevel, to manage relevant contact records and deliver agreed automation services. This may include sending email or text-message review requests and reminders, recording communication and opt-out status, supporting automated review replies and triggering missed-call text-back messages.

Where we use HighLevel to process a client’s customer information on that client’s instructions, HighLevel acts as our processor or sub-processor. HighLevel may use contracted sub-processors to provide infrastructure and communication services. Information may therefore be processed outside the United Kingdom using the safeguards described in HighLevel’s data-processing terms. You can read the HighLevel Privacy Policy and HighLevel Data Processing Agreement for further information.

Sharing Your Data

We do not sell your personal data. We only share it where necessary with trusted providers that help us run the business and deliver agreed services, such as website hosting, form processing, CRM and automation, email, text messaging, telephony, payment and professional service providers, or where disclosure is required by law.

International Transfers

Some service providers may process information outside the United Kingdom. Where this happens, we rely on an applicable lawful transfer mechanism and appropriate safeguards.

Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy and to meet legal, accounting or reporting requirements. Enquiry correspondence is normally retained for up to 24 months unless it becomes part of an ongoing client relationship or must be kept longer for legal reasons. Customer information used for an automation service is normally retained while that service remains active and is then deleted, returned or restricted in line with our agreement with the client, applicable legal requirements and the capabilities of the service provider.

Your Rights

Under UK data protection law, you may have the right to:

• Request access to your personal data.
• Ask us to correct or delete personal data.
• Restrict or object to certain processing.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.
• Complain to the UK Information Commissioner’s Office at ico.org.uk.

To exercise your rights, email joe@longnewtonwebdesign.com.

Cookies

The website may use cookies or similar storage needed for essential functionality, preferences, security and spam prevention. We do not currently use marketing or advertising cookies. If optional analytics or marketing tools are added later, this policy and any required consent controls will be updated.

Security

We use reasonable technical and organisational measures to protect personal data. However, no internet transmission or storage system can be guaranteed to be completely secure.

Children

Our services are intended for adults and businesses. We do not knowingly collect personal data from children under 13. If you believe a child has supplied personal data, contact us so it can be removed.

Third-Party Links

This website may link to external websites. We are not responsible for their content or privacy practices, and you should review their privacy policies separately.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with an updated date.

Contact

Questions about this Privacy Policy can be sent to joe@longnewtonwebdesign.com or to the postal address above.