Privacy Policy

Information Technology Services (“ITS”, “we”, “us”, “our”) is a web design and digital services company registered in England & Wales, based in Stevenage, Hertfordshire.

We are the data controller for the personal data you provide to us. If you have any questions about how we handle your data, please contact us at hello@its-digital.co.uk.

We collect the following personal data when you submit our enquiry brief or contact us:

• Full name
• Email address
• Phone number (optional)
• Business name and description
• Business location
• Website URL (if applicable)
• Details about your project goals and requirements

We also collect non-personal data automatically when you visit our website, including your IP address, browser type, pages visited, and referring URL. This is collected via Google Analytics 4 and Vercel Analytics.

We use your personal data to:

• Respond to your enquiry and provide a proposal
• Deliver the web design and development services you request
• Communicate about your project (via email, phone, or WhatsApp)
• Send invoices and process payments
• Improve our services and website experience
• Comply with our legal obligations

We will not use your data for unsolicited marketing without your explicit consent.

Under UK GDPR, we process your data on the following legal bases:

• Contract performance — when processing is necessary to fulfil our services to you
• Legitimate interests — to respond to enquiries and improve our services
• Legal obligation — where required by law
• Consent — where you have explicitly agreed (e.g. marketing communications)

We retain client project data for six years after the end of a project in order to comply with UK tax and accounting requirements. Enquiry data from non-clients is retained for 12 months, after which it is securely deleted.

We share your data only with trusted third-party processors necessary to deliver our services:

• Formspree (formspree.io) — processes enquiry form submissions and sends them to our email
• Google (analytics.google.com) — website analytics via Google Analytics 4
• Vercel (vercel.com) — website hosting and infrastructure
• Sanity.io — content management for client websites (where applicable)

All third-party processors are bound by appropriate data processing agreements. We do not sell your data to any third party.

Our website uses essential cookies required for site operation, and analytics cookies via Google Analytics 4 (GA4). GA4 uses anonymised IP addresses and does not collect personally identifiable information by default.

You may opt out of analytics cookies at any time by using browser settings or a tool such as the Google Analytics Opt-out Browser Add-on.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict how we process your data
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at hello@its-digital.co.uk. We will respond within 30 days.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted via HTTPS encryption. We do not store payment card details — payments are processed by secure third-party providers.

Some of our third-party processors (including Vercel and Google) may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses where applicable.

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113  ·  ico.org.uk

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our services after any changes constitutes acceptance of the updated policy.