Legal

Privacy Policy

Last updated: March 2026

This policy explains how KM Web Design collects, uses and protects your personal data when you use this website or contact me about my services.

I take your privacy seriously and will only use your data in the ways described here. I will never sell your data to third parties.

1. Who I am

The data controller for this website is:

KM Web Design
Norfolk, United Kingdom
hello@kmwebdesign.co.uk

2. What data I collect

Contact form

When you submit the contact form on this website, I collect:

  • Your name
  • Your email address
  • Your phone number (optional — only if you provide it)
  • The message you write about your project

Cookies and analytics

This website uses cookies to help me understand how visitors use the site. This only happens if you click "Accept" on the cookie banner. If you decline, no analytics cookies are set.

I use Google Analytics to collect anonymised information about which pages are visited, how long visitors stay, and where they came from. This data does not identify you personally.

Data I do not collect

I do not collect payment details through this website. If you become a client, payment is handled separately via bank transfer or invoice.

3. Why I collect your data

Data Purpose Legal basis
Contact form data To respond to your enquiry and discuss your project Legitimate interest / pre-contractual steps
Analytics cookies To understand how the website is used and improve it Consent

4. Who I share your data with

Your data may be processed by the following third-party services:

Web3Forms

The contact form on this website is processed by Web3Forms. When you submit a form, your data is transmitted to their servers to be delivered to me by email. Web3Forms does not store your form submissions after delivery. See their privacy policy at web3forms.com/privacy.

Google Analytics

If you accept cookies, anonymised usage data is sent to Google Analytics. Google may process this data on servers outside the UK. For more information, see Google's Privacy Policy.

I do not share your data with anyone else, and I will never sell your data.

5. How long I keep your data

Enquiry data from the contact form is retained in my email inbox for as long as is reasonably necessary to manage the enquiry and any resulting project. If no project results from an enquiry, I will delete contact data within 12 months.

Analytics data is retained according to Google Analytics' standard data retention settings (26 months by default).

6. Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data I hold about you
  • Rectification — ask me to correct inaccurate data
  • Erasure — ask me to delete your data (the "right to be forgotten")
  • Restriction — ask me to limit how I use your data
  • Objection — object to me processing your data on grounds of legitimate interest
  • Portability — request your data in a portable format

To exercise any of these rights, email me at hello@kmwebdesign.co.uk. I will respond within 30 days.

7. Cookies

This website uses a cookie consent banner. Your preference (accept or decline) is stored in your browser's local storage. No cookies are set until you make a choice.

You can withdraw your consent at any time by clearing your browser's local storage, or by contacting me and I will advise you how to do so.

8. Security

This website is hosted on secure, industry-standard infrastructure with HTTPS encryption. I take reasonable steps to protect your data, but no method of transmission over the internet is 100% secure.

9. How to complain

If you are unhappy with how I have handled your data, please contact me first at hello@kmwebdesign.co.uk and I will do my best to resolve it.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

I may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of this website after changes are posted constitutes acceptance of the updated policy.