Enquiries stay enquiries. We use the details you share to discuss your website and respond to your request. Contacting us does not automatically sign you up to a marketing list, and we do not sell your personal information.
1. Who is responsible for your information?
Knight Web Co., operated by Lewis Knight in Scotland, United Kingdom, is responsible for how the personal information described in this notice is used (the data controller).
For privacy questions, requests or complaints, contact Lewis at hello@knightwebco.co.uk.
This notice covers our own business enquiries and customer relationships. Websites we build for other businesses have their own privacy notices and controllers.
2. Information we collect and where it comes from
- Enquiry details you provide: your name, business name, email address, phone number if supplied, website or social links, industry, design preferences, project requirements and messages.
- Facebook or Messenger details: the name and profile information made available to our business when you contact us, your answers to our questions, messages, and any contact details or attachments you choose to share.
- Project records: agreed scope, quotations, correspondence and, when you become a customer, the billing and payment records needed to administer the work.
- Business references: information on a business website or social page you ask us to review when preparing a mock-up or quote.
- Technical information: hosting and security services may process your IP address, browser details, request time and requested pages. Website-usage information is explained below.
You choose whether to enquire. Our website form marks the information needed to respond, including your name, business and email. Without sufficient contact or project information, we may not be able to provide a useful reply or mock-up. Please do not send passwords, payment-card details or sensitive personal information through an enquiry form or Messenger.
3. Why we use it and our lawful bases
Under UK data protection law, we need a lawful basis for using personal information. We use:
- Steps towards a contract, or performing a contract: to respond to your request for a quote or mock-up, agree a project and deliver services where you are the prospective or actual customer.
- Legitimate interests: to handle general enquiries, communicate with people representing business customers, keep relevant correspondence, protect the website against misuse and understand overall website performance. Our interests are running a reliable web-design business, responding to requests and improving the service, while respecting your rights.
- Legal obligations: to keep records required for tax or accounting and respond to legally required requests. Where records are needed to establish or defend a legal claim, we rely on our legitimate interests in protecting our legal rights.
- Consent, where requested: for any separate optional marketing you expressly choose to receive. You can withdraw that consent at any time without affecting earlier lawful use. An enquiry or privacy acknowledgement is not a subscription to marketing.
We do not use your Knight Web Co. enquiry to add you to another business's marketing list.
4. Facebook lead ads and Messenger
When you respond to a Knight Web Co. advert, complete a lead form or answer questions in Messenger, we receive the information you submit through Meta's business tools. We use it to understand your business, reply to you, discuss a free homepage mock-up and provide a quote or service you request.
Messenger may present automated questions or an acknowledgement before Lewis replies personally. These prompts help collect your enquiry; we do not make decisions with legal or similarly significant effects about you solely by automated processing.
Meta also processes information to operate Facebook, Instagram, Messenger, advertising and measurement under its own terms and Meta Privacy Policy. This notice describes Knight Web Co.'s use of your information, not all of Meta's separate processing. You can contact us by email instead of using Messenger.
5. Who receives your information?
We use the services needed to run the business and handle enquiries:
- Vercel: website hosting, processing the website contact-form request, technical security and Web Analytics.
- Zoho Mail: business email, including website enquiry notifications, acknowledgements and our replies.
- Meta: the advertising, lead-form and messaging services you use to contact us.
- Relevant project providers or professional advisers: for example, hosting or domain providers needed for agreed work, or accounting and legal advisers where necessary. We share only information relevant to their role.
We may disclose information when legally required or necessary to establish or protect legal rights. We do not sell enquiry information or provide it to unrelated businesses for their marketing.
6. Processing outside the United Kingdom
Our providers operate internationally, so information may be processed outside the UK, including in the United States and European Economic Area. Website hosting, email delivery and Meta services should not be understood as UK-only storage.
Vercel's Data Processing Addendum sets out international-transfer safeguards, including standard contractual clauses and UK transfer provisions. Zoho's Privacy Policy describes its group and third-party processing and contractual transfer protections. Meta's international processing is explained in its privacy policy linked above.
Contact us to ask about the destination countries and safeguards relevant to your information, or to request a copy of the relevant safeguards.
7. How long we keep information
We do not keep personal information indefinitely simply because someone has enquired. Retention depends on the purpose and type of record:
- Enquiries and mock-up discussions: while the discussion or requested follow-up is active and afterwards only where needed to record what was requested or resolve an outstanding matter. Whether you become a customer affects what must be kept.
- Customer and project records: while needed to deliver the agreed work or ongoing support, and afterwards where required for accounting, tax, contractual obligations or a potential or actual dispute.
- Technical records: for the operational and security purposes of the relevant provider, under its service retention settings and policies. Website-usage statistics are separate from enquiry correspondence.
Information no longer needed for these purposes is deleted or securely disposed of. Provider backups may take longer to expire than active records. Deleting information held by Knight Web Co. does not automatically delete Meta's own records or copies held by your email provider; their policies and controls apply to those copies.
8. Website analytics and cookies
We use Vercel Web Analytics to understand overall website use. This can include pages viewed, referring websites, approximate location, device and browser type, and events such as clicking a free mock-up button or successfully submitting an enquiry.
Our custom enquiry events record the selected enquiry route and design direction, not the name, email address, phone number or free-text message entered in the form. The form itself is processed separately so we can reply.
Vercel describes its analytics as using aggregated statistics without third-party cookies; its visitor-session identifier is discarded after 24 hours. This does not mean all analytics statistics or enquiry records are deleted after 24 hours. Read Vercel's analytics privacy information for more detail.
We do not currently add advertising or behavioural-tracking cookies to this website. Facebook and Messenger have their own cookies, settings and privacy controls when you use their services. This notice will be updated if our website's tracking setup changes.
9. Your rights and choices
Depending on the circumstances and our lawful basis, you can ask to access your personal information, correct inaccuracies, have it erased, restrict its use, or receive certain information in a portable format. These rights are subject to the conditions and exceptions in data protection law.
Your right to object
You can object to processing based on our legitimate interests for reasons relating to your situation. You can object to direct marketing at any time. Email hello@knightwebco.co.uk and tell us what you would like us to stop.
Where we rely on consent, you can withdraw it by the same email address. We may need to verify your identity before disclosing or changing personal information. We normally respond to rights requests within one month, subject to any extension or other adjustment permitted by law, and will explain if a request cannot be fulfilled in full.
Questions or complaints
Please contact Lewis using the email above so we can investigate your concern. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, through its complaints service.
10. Security, other websites and updates
Our website uses HTTPS to protect information in transit. We use business hosting and email services to handle enquiries, but no website or messaging service can guarantee absolute security. Contact us promptly if you believe information sent to Knight Web Co. has been misused.
Links to portfolio websites or other external services take you to sites with their own privacy practices. This notice does not replace those notices.
We may update this policy when our services, providers or use of information changes. The current version and its update date will remain available on this page.