Legal · UK GDPR
Privacy policy.
How we collect, use, and protect your personal data. Written in plain English wherever we can manage it.
Last updated: 14 April 2026 · Version 3.0
Sky Web Design Ltd (“Sky”, “we”, “us”) is the data controller for personal data collected through skywebdesign.uk and during the course of our client engagements. We comply with UK GDPR and the Data Protection Act 2018.
1. Who we are
Sky Web Design Ltd is a company registered in England and Wales, company number 08765432, with its registered office at 14 North Street, Leeds, LS1 2AA. Our VAT number is GB 187 3210 98 and we are registered with the Information Commissioner’s Office (ICO) under registration ZA192045.
2. What data we collect
We only collect data we actually need. Specifically:
- Enquiry data, when you fill in our start-a-project form: name, email, phone (optional), company name, and the content of your enquiry.
- Client data, once we’re working together: billing details, project communications, and any access credentials you share so we can do the work.
- Technical data, anonymised analytics if you’ve accepted optional cookies: device type, browser, pages visited, and a rough location (country/region only).
- Correspondence, emails you send us and our replies, kept in our business email for service history.
- Overdue amounts accrue interest at 4% above the Bank of England base rate under the Late Payment of Commercial Debts (Interest) Act 1998.
- Sky may suspend work on any overdue account with 7 days’ written notice.
We do not buy data, and we do not sell data. Ever.
3. Why we collect it and our legal basis
| Purpose | Legal basis (UK GDPR Art. 6) |
|---|---|
| Reply to your enquiry | Legitimate interest |
| Deliver services under a contract | Performance of a contract |
| Invoice you and meet UK tax obligations | Legal obligation |
| Run analytics on this website | Consent (via cookie banner) |
| Send occasional project updates to existing clients | Legitimate interest |
| Marketing emails to prospects who opted in | Consent |
4. How long we keep it
- Enquiry data: up to 12 months if we don’t end up working together.
- Client project data: 7 years from the end of the engagement (UK accounting requirement).
- Analytics: 14 months.
- Email correspondence: 7 years, then archived or deleted.
5. Who we share it with
We keep things tight. Data may be shared with these sub-processors, each under a written data processing agreement:
- Microsoft (UK), business email and Office 365.
- Xero, accounting and invoicing.
- Cloudflare Ltd, CDN, DDoS protection, and DNS for this site.
- Fathom Analytics, privacy-first analytics (no personal data shared).
- Stripe, payment processing for subscriptions to our products.
We do not transfer your data outside the UK or EEA unless the recipient is covered by an adequacy decision or equivalent safeguards. Where we use US-based processors (e.g. Stripe), transfers rely on the UK extension to the EU-US Data Privacy Framework and standard contractual clauses.
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (a “subject access request”).
- Request correction of inaccurate or incomplete data.
- Request erasure (“right to be forgotten”) where the lawful basis no longer applies.
- Object to processing based on legitimate interests.
- Request data portability for data you’ve given us.
- Withdraw consent at any time (e.g. for analytics cookies or marketing).
To exercise any of these rights, email info@skywebdesign.co.uk. We’ll reply within 30 days, usually much sooner.
7. Security
We take security seriously. Specifically: encrypted email, 2FA on every business account we run, encrypted backups, minimum-necessary access on client systems, and a documented incident response plan. If a breach affecting your data occurs, we’ll notify you and the ICO within 72 hours as required.
8. Cookies
See our dedicated cookie policy for a full breakdown of the cookies used on this site, which are optional, and how to change your choices.
9. Children
Our site and services are not directed to children under 13. We do not knowingly collect personal data from children.
10. Complaints
If you’re unhappy with how we’ve handled your data, please tell us first, info@skywebdesign.co.uk, so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced on this page with an updated version number and revision date. The current version is listed at the top.
Quick questions?
Email info@skywebdesign.co.uk, real humans reply, usually same day.
