This privacy policy explains how CreateTheWeb collects, uses, shares and protects your personal data when you visit our website, contact us, or use our services. It also sets out your rights under data protection law and how to exercise them.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

CreateTheWeb Limited (trading as “CreateTheWeb”, “we”, “us” or “our”) is the data controller responsible for your personal data. This means we decide how and why your personal data is processed.

Company: CreateTheWeb Limited (registered in England and Wales, company number 15300868)
Address: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB
Email: hello@createtheweb.co.uk
Phone: 0333 358 0039
ICO registration reference: ZB757634

If you have any questions about this policy or how we handle your personal data, please contact us using the details above.

2. The personal data we collect

We may collect and process the following categories of personal data:

Identity and contact data — your name, company name, email address and telephone number.
Enquiry and communication data — the content of any messages, enquiries or correspondence you send us, including via our contact forms, email or phone.
Technical data — your IP address, browser type and version, device information, operating system, and other technology on the devices you use to access our website.
Usage data — information about how you use our website, such as the pages you visit, time spent on pages, and the links you click.
Marketing and communications data — your preferences in receiving marketing from us and your communication preferences.

We do not knowingly collect any special categories of personal data (such as data about your health, race, religion, or political opinions), and we ask that you do not send us such information.

3. How we collect your data

We collect personal data:

Directly from you — when you complete a contact or enquiry form, request a quote or meeting, email or call us, or otherwise correspond with us.
Automatically — as you interact with our website, through cookies and similar technologies (see section 5). This happens only in line with your cookie preferences.
From third parties — we may receive technical and analytics data from service providers such as analytics and advertising platforms, where you have consented to the relevant cookies.

4. How we use your data and our legal bases

Under data protection law, we must have a lawful basis for processing your personal data. The bases we rely on are:

Consent — for non-essential cookies, analytics and advertising, and for sending you marketing communications where required. You can withdraw your consent at any time.
Legitimate interests — to respond to your enquiries, to operate, secure and improve our website and business, and to carry out business-to-business marketing, where this is not overridden by your rights.
Performance of a contract — to provide our services to you and manage our relationship with you as a client.
Legal obligation — to comply with our legal and regulatory obligations, such as keeping accounting and tax records.

We use your personal data to:

respond to your enquiries and provide the information, quotes or services you request;
provide, manage and deliver our services and administer our relationship with you;
operate, maintain, secure and improve our website and understand how it is used;
send you marketing communications where you have consented or where we are otherwise permitted to do so;
comply with our legal obligations and protect our legal rights.

5. Cookies and similar technologies

Our website uses cookies and similar technologies to make the site work, to understand how it is used, and — with your consent — for analytics and advertising. Cookies are small text files placed on your device.

We group cookies into the following categories:

Strictly necessary — required for the website to function. These are always active and do not require consent.
Analytics — help us understand how visitors use the site so we can improve it (for example, Google Analytics).
Marketing — used to measure and deliver advertising and to show you relevant content (for example, Google Ads, Meta and LinkedIn).
Functional — remember your preferences and enable enhanced features and embedded content.

When you first visit our site, we ask for your consent before setting any non-essential cookies. Non-essential cookies remain disabled until you choose to enable them. You can accept all, reject all, or set your preferences by category, and you can change or withdraw your consent at any time using the cookie preferences control available on our site.

We use Google Consent Mode, which means analytics and advertising tags respect your choices: where you do not consent, these services are limited and do not store identifying cookies on your device.

6. Marketing communications

We will only send you marketing communications where you have consented, or where we are otherwise permitted to do so under applicable law. You can opt out of marketing at any time by using the “unsubscribe” link in our emails or by contacting us at hello@createtheweb.co.uk. Opting out of marketing will not affect any service-related communications we need to send you.

7. Who we share your data with

We do not sell your personal data. We may share your personal data with trusted third parties who process it on our behalf (our “processors”) or where we are required to do so. These include:

Hosting and infrastructure providers who host our website and store our data;
Content management and IT service providers who help us operate our website and systems;
Analytics and advertising providers, such as Google, Meta and LinkedIn, where you have consented to the relevant cookies;
Communication and email providers who help us manage enquiries and correspondence;
Professional advisers such as accountants, auditors and legal advisers;
Regulators, law enforcement and other authorities where required by law.

We require all our processors to respect the security of your personal data and to treat it in accordance with the law. They may only process your personal data on our documented instructions and for specified purposes.

8. International data transfers

Some of our service providers are based outside the United Kingdom, which means your personal data may be transferred to and processed in countries outside the UK. Where we transfer personal data internationally, we ensure a similar degree of protection by relying on an appropriate safeguard, such as a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

9. How long we keep your data

We only keep your personal data for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting or reporting requirements.

Enquiries that do not become client relationships are generally retained for up to 24 months from your last contact with us, after which they are deleted or anonymised.
Client records are retained for the duration of our relationship and for up to 6 years afterwards to comply with our legal and tax obligations.

When personal data is no longer required, we securely delete or anonymise it.

10. How we protect your data

We have put in place appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. We limit access to your personal data to those who have a genuine business need to access it, and they are subject to a duty of confidentiality.

11. Your data protection rights

Under data protection law, you have the following rights in relation to your personal data:

The right to be informed about how we use your personal data (which this policy provides).
The right of access to a copy of the personal data we hold about you.
The right to rectification of inaccurate or incomplete personal data.
The right to erasure (the “right to be forgotten”) in certain circumstances.
The right to restrict processing of your personal data in certain circumstances.
The right to data portability, allowing you to obtain and reuse your personal data.
The right to object to processing based on legitimate interests, and to direct marketing at any time.
Rights relating to automated decision-making and profiling — we do not make decisions based solely on automated processing that produce legal or similarly significant effects.
The right to withdraw consent at any time where we rely on consent.

You will not usually have to pay a fee to exercise your rights, and we will respond to your request within one month. In some cases this period may be extended, and we will let you know if so.

12. How to exercise your rights

To exercise any of your rights, please contact us at hello@createtheweb.co.uk or by post at 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB. We may need to request specific information from you to help us confirm your identity before responding.

13. Complaints

If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

14. Children’s privacy

Our website and services are not directed at children, and we do not knowingly collect personal data relating to children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

15. Third-party links

Our website may contain links to third-party websites, plugins and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

16. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this page periodically to stay informed about how we protect your personal data.

17. Contact us

If you have any questions about this privacy policy or our data practices, please contact us:

Email: hello@createtheweb.co.uk
Phone: 0333 358 0039
Post: CreateTheWeb Limited, 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB