Privacy Policy

Effective date: 23 September 2025

Last updated: 17 March 2026

Introduction

Your privacy matters to me.

This privacy policy explains how I collect, use, store, and protect personal information when you visit my website or contact me about my services.

This policy applies to the website operated by Websites By MZ.

I aim to keep things simple and transparent so you understand exactly what happens with your information.

Who I Am

Websites By MZ is a website design service operated by a sole trader based in England, United Kingdom.

I am the person responsible for how personal data is handled on this website. This means I act as the data controller for any personal information collected through the website.

If you have any questions about privacy or how your information is used, you can contact me through the contact form.

What Personal Data I Collect

The website only collects a small amount of personal information when it is necessary to provide my services.

Information you provide directly

When you contact me or begin discussing a project, you may provide:

  • Email address
  • Messages or enquiries you send
  • Project information you choose to share
  • Survey responses relating to your project
  • Your preferred method of communication (for example social media, text, or email)

Surveys are used to gather information needed to begin a website project and are completed using Google Forms.

Technical data

Some technical information may be collected automatically when you use the website, including:

  • IP address
  • Browser type
  • Device information
  • Basic website usage information

How I Collect Your Data

Your data may be collected in the following ways:

  • When you submit the contact form
  • When you communicate with me after submitting a request
  • When you complete project discussion surveys via Google Forms
  • Through cookies and analytics tools
  • Through security and spam protection systems

Why I Collect Your Data

I only collect personal data when it is necessary.

Your information may be used for:

  • Responding to enquiries
  • Discussing potential projects
  • Providing website design services
  • Managing and completing client projects
  • Improving the website using analytics
  • Preventing spam, abuse, or fraudulent activity
  • Meeting legal and accounting obligations

Legal Basis for Processing

UK data protection law requires me to explain the legal reasons for processing personal data.

Depending on the situation, I rely on:

  • Contract – when I process information to provide website design services or discuss a potential project.
  • Legitimate interests – to operate and improve the website, analyse how it is used, and protect it from spam or malicious activity.
  • Legal obligation – to comply with legal or tax requirements where necessary.

Cookies and Tracking

This website uses cookies and similar technologies.

Cookies help the website work properly and allow me to understand how visitors use the site.

The website may use:

  • Essential cookies – these help the website function properly.
  • Analytics cookies – these help me understand how visitors use the website so I can improve it.

Visitors can manage cookie preferences through the cookie banner shown when visiting the website. For more information about cookies, you can visit All About Cookies.

Analytics

I use Google Analytics to understand how visitors use the website.

Google Analytics may collect information such as:

  • Pages visited
  • Time spent on the website
  • Approximate location
  • Device and browser type

This information helps me improve the website and the services offered. You can learn more about how Google handles data here: Google Privacy Policy.

Spam and Security Protection

To protect the website from spam and automated abuse, I use Google reCAPTCHA.

This service may collect technical information such as IP addresses and behaviour patterns to determine whether a visitor is human or a bot.

This helps keep the website secure and prevent spam submissions. More information can be found here: Google reCAPTCHA information.

Advertising Services

I may use services such as Google Ads for advertising or analytics purposes.

These services may use cookies or tracking technologies to measure the effectiveness of advertisements or understand how users interact with the website. You can learn more here: Google Ads privacy information.

Payments

Payments for services are not processed directly on this website.

If a client needs to make a payment, I send them a secure payment link provided by Stripe.

All payment information is entered and processed on Stripe’s own website, not on this website. Stripe processes payment data according to its own privacy policies. More information is available here: Stripe Privacy Policy.

Third-Party Services I Use

Some services I use help operate the website or deliver my services.

These may include:

These companies may process limited personal information when necessary to provide their services.

International Data Transfers

Some of the third-party services used by the website may store or process data outside the United Kingdom. When this happens, appropriate safeguards are used to ensure personal data remains protected in line with UK data protection laws.

How Long I Keep Data

I do not keep personal data longer than necessary.

Typical retention periods are:

  • Client project information – kept for up to 6 years after a project is completed
  • Analytics data – typically stored for around 14 months
  • General enquiries – removed when they are no longer needed

How I Protect Your Data

I take reasonable steps to protect personal information.

Security measures include:

  • HTTPS encryption
  • Secure hosting infrastructure
  • Restricted access to personal data
  • Password-protected systems
  • Spam and bot protection tools
  • Regular website backups

Your Data Protection Rights

Under UK data protection law, you have several rights regarding your personal data.

You have the right to:

  • Request access to the personal data I hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Request restriction of how your data is used
  • Object to certain types of processing

If you would like to exercise any of these rights, please use the contact form.

Complaints

If you believe your data has been handled improperly, you have the right to make a complaint to the UK’s data protection regulator.

Information Commissioner’s Office (ICO)

You can find more information here: Information Commissioner’s Office.

Third-Party Links

My website may contain links to external websites such as portfolio examples or tools I recommend. Once you leave this website, I do not control those websites and cannot be responsible for their privacy practices.

Children’s Privacy

This website and the services offered are intended for adults. I do not knowingly collect personal information from individuals under the age of 18.

My Privacy Commitment

I believe in collecting as little personal data as possible. I only collect information that is genuinely needed to provide services or run the website effectively. Privacy and security are considered whenever the website is developed or updated.

Changes to This Privacy Policy

From time to time, I may update this privacy policy to reflect changes to the website, services, or legal requirements. The latest version will always be available on this page.

Terms & Conditions

To view the terms of my website and services, please visit my Terms & Conditions.

Relevant Laws and Regulations

This privacy policy is designed to comply with applicable UK data protection laws and regulations, including:

  • UK GDPR
  • Data Protection Act 2018
  • PECR (Privacy and Electronic Communications Regulations)
  • Consumer Protection from Unfair Trading Regulations
  • Age Appropriate Design Code (where applicable)