Privacy Policy

1. Who we are

Prestige Web Design(“we”, “us”) is a web design and development studio based in Slough, Berkshire, working with clients across the UK and remotely worldwide. We are the data controller for personal data collected through this website.

This policy covers visitors to this website only. If we build or host a website for you as a client, any personal data processed through your site is covered by the separate agreement we put in place for that project, not by this policy.

ICO registration: [CONFIRM: ICO registration number, if applicable]

2. What we collect

• Enquiry form: your name, email address, phone number, preferred contact method, and the content of your message. This is submitted voluntarily by you.
• Admin dashboard: a single session cookie, set only when the site owner signs in to manage enquiries. Visitors never receive this cookie.
• Cookie preference:a small cookie recording whether you accepted or rejected analytics cookies, so we don't ask again.
• Analytics: if (and only if) you accept analytics cookies, Google Analytics may collect pseudonymous usage data such as pages viewed and approximate location. Analytics is currently not active on this site.
• Technical/security data: your IP address is used transiently for rate limiting and spam prevention on form and login endpoints. It is not stored alongside your enquiry.

3. Why we use it, and our lawful basis

• To respond to your enquiry and quote for work — lawful basis: legitimate interests (responding to a request you made) and, where a project proceeds, steps prior to entering a contract.
• To protect the site from spam and abuse — lawful basis: legitimate interests (keeping the service secure and available).
• To measure how the site is used — lawful basis: consent, which you can give or withdraw at any time via the Cookie Preferences link in the footer.

4. Who we share it with

We do not sell your data. We share it only with the service providers needed to run this site:

• Vercel — website hosting and delivery.
• Supabase — the database that stores submitted enquiries.
• Resend — sends the notification email to us and the confirmation email to you.
• Upstash — short-lived rate-limiting counters keyed by IP address, used purely for abuse prevention.
• Google Analytics — consent-gated and currently inactive. No analytics scripts load unless you accept.

Some of these providers may process data outside the UK. Where that happens, transfers are covered by the safeguards those providers put in place (such as Standard Contractual Clauses or an adequacy decision).

5. How long we keep it

Enquiries are kept for as long as needed to deal with your request and for a reasonable period afterwards for our business records — normally no more than 24 months where no project follows. You can ask us to delete your enquiry sooner at any time.

6. Your rights

Under UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use your data;
• receive your data in a portable format, where applicable; and
• withdraw consent to analytics cookies at any time, without affecting anything done before you withdrew it.

To exercise any of these, email us at prestige.devenquiries@gmail.com. We aim to respond within one month.

7. Cookies

We set only essential cookies by default. Analytics cookies are never set unless you accept them. If you reject or later change your mind, use the Cookie Preferences link in the footer — rejecting also clears any existing analytics cookies.

8. Complaints

If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page always reflects the most recent version.