Privacy

Wyvern Web UK (“we”, “us”, “our”) is a web design business based in Somerset, run by Marcus Chaplin as a sole trader. We are the “data controller” for the personal information described on this page, which means we’re responsible for looking after it. You can reach us any time at hello@wyvernweb.uk.

We only collect what we need to answer your enquiry, give you a quote, and — if you become a client — build and look after your website. We never sell your information.

The information we collect

• When you contact us or book a call: your name, business name, email address, phone number (if you give it), your chosen time slot, and anything you write in your message.
• When you become a client: the details we need to build and run your project, your billing details, and our correspondence with you. Card payments are handled securely by Stripe — we never see or store your full card number.
• Automatically: a small amount of technical data needed to keep the site working and secure. See our Cookie Policy for details.

Why we use it, and our legal basis

• To respond to your enquiry and prepare a quote — our legitimate interests and taking steps at your request before entering a contract.
• To deliver and manage your project and care plan — performance of our contract with you.
• To take payment and keep proper records — contract and legal obligation (tax and accounting).
• To send service messages such as quotes, receipts and project updates — contract and legitimate interests.
• To send occasional updates or offers — only with your consent, which you can withdraw at any time.

Who we share it with

We don’t sell your data or share it for advertising. We use a small number of trusted providers to run the business, who process data on our behalf under contract:

• Supabase — secure database and file storage.
• Lovable — website hosting.
• Stripe — payment processing.
• Resend — sending our emails to you.

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK/EU-approved data transfer terms). We may also disclose information where the law requires it.

How long we keep it

If you enquire but don’t go ahead, we keep your details for up to 24 months in case you return, then delete them. For clients, we keep project and financial records for at least 6 years after our work ends, to meet HMRC and accounting rules, after which we delete or anonymise them.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you;
• have inaccurate information corrected;
• ask us to delete it, or restrict or object to how we use it;
• ask us to transfer it to another provider; and
• withdraw any consent you’ve given.

To exercise any of these, just email hello@wyvernweb.uk. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk — though we’d be grateful for the chance to put things right first.

Keeping your information safe

We use reasonable technical and organisational measures to protect your information, including access controls, encryption in transit, and reputable providers. No system is ever 100% secure, but we take this seriously.

Children

Our services are aimed at businesses and are not directed at children. We don’t knowingly collect information about anyone under 16.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows the current version. If you have any questions, email hello@wyvernweb.uk.