Privacy Policy
Last updated: March 2026
This policy explains how KM Web Design collects, uses and protects your personal data when you use this website or contact me about my services.
I take your privacy seriously and will only use your data in the ways described here. I will never sell your data to third parties.
1. Who I am
The data controller for this website is:
KM Web DesignNorfolk, United Kingdom
hello@kmwebdesign.co.uk
2. What data I collect
Contact form
When you submit the contact form on this website, I collect:
- Your name
- Your email address
- Your phone number (optional — only if you provide it)
- The message you write about your project
Cookies and analytics
This website uses cookies to help me understand how visitors use the site. This only happens if you click "Accept" on the cookie banner. If you decline, no analytics cookies are set.
I use Google Analytics to collect anonymised information about which pages are visited, how long visitors stay, and where they came from. This data does not identify you personally.
Data I do not collect
I do not collect payment details through this website. If you become a client, payment is handled separately via bank transfer or invoice.
3. Why I collect your data
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | To respond to your enquiry and discuss your project | Legitimate interest / pre-contractual steps |
| Analytics cookies | To understand how the website is used and improve it | Consent |
4. Who I share your data with
Your data may be processed by the following third-party services:
Web3Forms
The contact form on this website is processed by Web3Forms. When you submit a form, your data is transmitted to their servers to be delivered to me by email. Web3Forms does not store your form submissions after delivery. See their privacy policy at web3forms.com/privacy.
Google Analytics
If you accept cookies, anonymised usage data is sent to Google Analytics. Google may process this data on servers outside the UK. For more information, see Google's Privacy Policy.
I do not share your data with anyone else, and I will never sell your data.
5. How long I keep your data
Enquiry data from the contact form is retained in my email inbox for as long as is reasonably necessary to manage the enquiry and any resulting project. If no project results from an enquiry, I will delete contact data within 12 months.
Analytics data is retained according to Google Analytics' standard data retention settings (26 months by default).
6. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data I hold about you
- Rectification — ask me to correct inaccurate data
- Erasure — ask me to delete your data (the "right to be forgotten")
- Restriction — ask me to limit how I use your data
- Objection — object to me processing your data on grounds of legitimate interest
- Portability — request your data in a portable format
To exercise any of these rights, email me at hello@kmwebdesign.co.uk. I will respond within 30 days.
7. Cookies
This website uses a cookie consent banner. Your preference (accept or decline) is stored in your browser's local storage. No cookies are set until you make a choice.
You can withdraw your consent at any time by clearing your browser's local storage, or by contacting me and I will advise you how to do so.
8. Security
This website is hosted on secure, industry-standard infrastructure with HTTPS encryption. I take reasonable steps to protect your data, but no method of transmission over the internet is 100% secure.
9. How to complain
If you are unhappy with how I have handled your data, please contact me first at hello@kmwebdesign.co.uk and I will do my best to resolve it.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. Changes to this policy
I may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of this website after changes are posted constitutes acceptance of the updated policy.