Privacy Policy

Last updated: 12 November 2026

This policy explains how Radius Web Design collects, uses and protects personal information when you visit our website, get in touch with us, or work with us. We only collect what we need, and we never sell it.

1. Who we are

Radius Web Design is the trading name of Ian Grieves, a sole trader based in Cheltenham. Under UK data protection law (the UK GDPR and the Data Protection Act 2018), Ian Grieves is the “controller” of the personal information described in this policy.

You can contact us about anything in this policy:

Ian Grieves, Radius Web Design
7 Barleyfields Avenue
Cheltenham
GL52 8FL
Email:
Phone: 01242 462003

2. Who this policy covers

• visitors to radiuswebdesign.com
• people who contact us by our website form, email, phone or WhatsApp
• our clients and the people we deal with at their organisations
• our suppliers and the freelancers we work with

It does not cover visitors to websites we build or host for clients. Each client is responsible for its own website’s privacy policy (see section 10).

3. The information we collect

Information you give us

• Enquiries: when you use our contact form we receive your name, organisation, email address, phone number and the details of your enquiry. We also receive whatever you choose to tell us by email, phone or WhatsApp.
• Clients: contact and billing details, project correspondence, and the content you supply for your website, such as text, images and logos. To do our work we may also hold login details for your website, hosting, domain, email or Google Ads accounts.
• Suppliers and freelancers: contact details, payment details and correspondence.

Information collected automatically

• Analytics: if you accept statistics cookies, Google Analytics collects information about how you use our website, such as the pages you visit, how you found us, your approximate location and the type of device and browser you use. Google Analytics does not set cookies unless you consent.
• Advertising measurement: if you accept marketing cookies, Google Ads records whether you reached our website by clicking one of our adverts and whether you then got in touch, so we can see how well our advertising works. No Google Ads cookies are set unless you consent.
• Before you make a cookie choice: the Google tag on our website still loads, but without cookies. It sends Google limited information, such as the page you are viewing, your browser type and your consent choice, which Google uses to estimate overall visitor numbers and advertising results.
• Security and server logs: our website’s security software and our hosting provider record technical information such as IP addresses, browser details and the pages requested. We use this to protect the website against hacking, spam and abuse.
• Cookies: our Cookie Policy lists the cookies we use and explains how to change your choices.

Information from other sources

Our homepage shows reviews that customers have published on Google, including each reviewer’s name, profile picture and review. We may also receive your details if someone recommends us to you or introduces you to us.

4. How we use your information, and why we’re allowed to

The law requires a “lawful basis” for each way we use personal information. Ours are:

• Replying to enquiries and preparing quotes. Lawful basis: taking steps at your request before entering into a contract, or our legitimate interest in responding to people who contact us.
• Providing our services, including website design and development, hosting, email, maintenance and Google Ads management, and the communication and support that goes with them. Lawful basis: performing our contract with you or your organisation.
• Invoicing, accounts and VAT records. Lawful basis: our contract with you and our legal obligations under tax law.
• Keeping our website secure and filtering out spam. Lawful basis: our legitimate interest in protecting our website and business.
• Understanding how our website is used through Google Analytics. Lawful basis: your consent, which you can withdraw at any time through the cookie settings.
• Measuring how well our Google Ads advertising works. Lawful basis: your consent to marketing cookies, which you can withdraw at any time through the cookie settings.
• Sending Google limited, cookie-free measurement information before you make a cookie choice. Lawful basis: our legitimate interest in understanding, in aggregate, how our website and advertising perform.
• Showing Google reviews on our website. Lawful basis: our legitimate interest in sharing feedback that reviewers have already published.
• Keeping existing clients informed about their services and about similar services we offer. Lawful basis: our legitimate interest in looking after our clients. You can opt out of marketing messages at any time.
• Meeting legal requirements, and establishing or defending legal claims. Lawful basis: legal obligation, or our legitimate interests.

Where we rely on legitimate interests, we have weighed them against your rights and what you would reasonably expect. You can ask us for more detail, and you have the right to object (see section 8).

We do not sell your personal information, and we do not use it to make automated decisions about you that have legal or similarly significant effects.

5. Who we share it with

We only share personal information when we need to, and our service providers may only use it to provide their services to us. They include:

• our web hosting provider, which stores our website and the information it handles
• our email providers, which carry and store our email, including the messages sent through our contact form
• Google, for Google Analytics and Google Ads measurement. Google only sets cookies if you consent.
• Google Fonts, which supplies the fonts our website uses. Your browser fetches them from Google, which receives your IP address.
• Trustindex, which provides the Google reviews widget on our homepage
• WhatsApp (part of Meta), if you choose to message us using the WhatsApp button. WhatsApp’s own privacy policy applies to that conversation.
• members of our team and trusted freelancers who work on your project, who are bound by confidentiality
• our accountant, bank, insurers and professional advisers
• HMRC, the police, regulators or courts, where the law requires it

6. Transfers outside the UK

Some of our providers, such as Google and Meta, may process information outside the UK, including in the United States. When that happens, we rely on the safeguards UK law requires, such as UK adequacy regulations (including the UK–US “data bridge”) or the ICO’s International Data Transfer Agreement or Addendum.

7. How long we keep it

• Enquiries that don’t lead to work: up to two years, then deleted.
• Client and supplier records, including contracts, invoices and correspondence: for as long as we work together, then six years. This covers our tax and VAT obligations and the time limit for legal claims.
• Copies of contact form emails kept by our website: 14 days. The emails themselves are kept as enquiries or client records, as above.
• Google Analytics data: no longer than 14 months.
• Security logs: only as long as we need them to protect the website.
• Login details for client accounts: deleted or handed back when our work on that account ends.

8. Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you and get a copy
• have inaccurate information corrected, and incomplete information completed
• have your information erased in certain circumstances
• restrict how we use your information in certain circumstances
• object to our use of your information where we rely on legitimate interests, and to direct marketing at any time
• data portability: receive information you gave us in a commonly used electronic format, or have it sent to another organisation, where we use it on the basis of consent or contract
• withdraw your consent at any time where we rely on it, for example for analytics cookies. This doesn’t affect anything we did before you withdrew it.

To use any of these rights, contact us using the details in section 1. There is normally no charge. We may need to confirm your identity, and we will reply within one month. For complex requests, or several requests at once, we can extend this by up to two further months, and we will tell you if we do. Some rights have legal exceptions, and we will explain if one applies.

9. Complaints

If you are unhappy with how we have handled your personal information, please tell us first, using the details in section 1, so we can try to put it right. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome.

You also have the right to complain to the UK’s data protection regulator, the ICO, at ico.org.uk/make-a-complaint or on 0303 123 1113.

10. Websites and accounts we manage for clients

When we build, host or maintain a website for a client, or manage a client’s Google Ads account, we handle any personal information in it on that client’s behalf and on their instructions. This includes, for example, enquiries sent through the client’s own website. In that role we are a “processor”, the client is the controller, and the client’s own privacy policy applies. If you have a question about a website we built for someone else, please contact that organisation first.

11. Keeping your information secure

We use appropriate technical and organisational measures to protect personal information. These include encrypted (HTTPS) connections to our website, security and firewall software, strong passwords, and limiting access to the people who need it. No system is completely secure, but if a breach puts your rights at risk we will tell you, and the ICO, as the law requires.

12. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated at the top.