Privacy Policy

Introduction

Flux Web Design (“we”, “our”, or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

Data Controller

Information We Collect

Personal Information

We may collect the following types of personal information:

• Name and contact details (email address, phone number)
• Business information (company name, business type, location)
• Website requirements and project specifications
• Payment information (processed securely through Stripe)
• Communication preferences

Technical Information

We automatically collect certain technical information:

• IP address and location data
• Browser type and version
• Device information
• Website usage data and analytics
• Cookies and similar technologies

Legal Basis for Processing

Under UK GDPR and EU GDPR, we process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through our contact forms
• Contract: To fulfil our contractual obligations for website services
• Legitimate Interest: For business operations, marketing, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

How We Use Your Information

We use your personal information for the following purposes:

• Providing website design and development services
• Communicating with you about your project
• Processing payments and managing accounts
• Improving our services and website functionality
• Marketing and promotional communications (with your consent)
• Legal compliance and dispute resolution

Data Sharing and Third Parties

We may share your information with the following third parties:

• Payment Processors: Stripe for secure payment processing
• Hosting Providers: For website hosting and maintenance
• Analytics Services: Google Analytics for website performance
• Legal Authorities: When required by law or to protect our rights

We ensure all third parties comply with applicable data protection laws and have appropriate safeguards in place.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Client Data: 7 years after project completion (for legal and accounting purposes)
• Marketing Data: Until you withdraw consent or opt-out
• Analytics Data: 26 months (Google Analytics default)
• Payment Data: As required by financial regulations

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision Making: Human review of automated decisions

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• SSL encryption for data transmission
• Secure servers and hosting environments
• Regular security updates and monitoring
• Access controls and staff training
• Regular backups and disaster recovery procedures

International Data Transfers

Some of our service providers may be located outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government or European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes and codes of conduct

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with data protection laws. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.