Privacy Policy
Last updated: 10 June 2026
This policy explains what personal data Sitework collects when you use this website or enquire about a build, why we collect it, and the rights you have under UK data protection law.
1. Who we are
Sitework ("we", "us", "our") is a web design service operated by Jacob Orsborn-Smith as a sole trader, trading as Sitework, based in the United Kingdom. We are the "data controller" responsible for your personal data under the UK GDPR and the Data Protection Act 2018.
For any privacy question or to exercise your rights, contact us at jacoborsbornsmith@gmail.com.
2. The data we collect
We only collect what you give us through the enquiry form on this site. That is:
- Your name
- Your business name (optional)
- Your trade and the area you cover
- Your phone number and/or email address
- Any notes you choose to add about your business or current website
We do not ask for payment details through this site, and we do not collect special-category (sensitive) data.
3. Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Reply to your enquiry and prepare free mockups | Taking steps at your request before entering a contract (Art. 6(1)(b)) |
| Deliver and support a website you commission | Performance of our contract with you (Art. 6(1)(b)) |
| Keep basic records of enquiries and clients | Our legitimate interests in running the business (Art. 6(1)(f)) |
We do not use your details for marketing, newsletters or advertising, and we never sell your data.
4. Age — this service is for adults
Sitework is a business-to-business service for trade business owners. It is not directed at children, and you must be 18 or over to submit the enquiry form. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it promptly.
5. Who we share it with
We keep your data to ourselves. The only third parties involved are the trusted service providers that run this site for us ("processors"):
- Vercel — website hosting and form delivery
- Supabase — secure storage of enquiry submissions
These providers process data only on our instructions and under their own data-protection terms. We may also disclose data if required by law.
6. Where your data is stored
Our providers may process data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law (such as adequacy regulations or standard contractual clauses) to keep your data protected.
7. How long we keep it
We keep enquiries that don't become clients for up to 24 months, then delete them. Records relating to clients are kept for as long as needed to provide the service and to meet our legal and accounting obligations (generally up to 6 years), after which they are deleted.
8. Cookies
This site does not use advertising or tracking cookies. We use only what's strictly necessary for the site and form to work. If we add analytics in future, we will update this policy and ask for consent where required.
9. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use it;
- request a copy in a portable format.
To exercise any of these, email us at jacoborsbornsmith@gmail.com. We will respond within one month.
10. Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.
Contact: Sitework — jacoborsbornsmith@gmail.com. Data controller: Jacob Orsborn-Smith, trading as Sitework, United Kingdom.