Privacy Policy

Cawley Digital is a sole trader established in the United Kingdom, trading from Dene House, Dene Lane, Farnham GU10 3PW, and is the data controller for the information described on this page.

You can reach us at [email protected] or +44 7546 894333.

There are two different relationships here and it matters which one you're reading about.

This page covers information about you — a business owner visiting this site, enquiring, or buying from us. We decide what happens to that data, so we are the controller of it.

Your customers' data — the names and phone numbers that come through your booking form, your missed calls, your review requests — is yours, not ours. We only handle it on your instructions, which makes you the controller and us your processor. That relationship is governed by our Data Processing Agreement, not by this page.

When you enquire or ask for a free mockup.Your name, business name, email, phone number, trade and town. We use it to build the mockup and to contact you about it. Lawful basis: legitimate interests — you asked us for something and we can't deliver it without these.

Publicly listed business information.Before we contact a business we look at what is already public — the business name, trade, address, phone number, website and Google listing. Lawful basis: legitimate interests in offering a relevant service to a business. If you'd rather we didn't, say so once and we'll delete the record and not contact you again.

When you become a client. Everything above, plus billing details, the content you send us for your site, and the accounts you give us access to. Lawful basis: performance of our contract with you.

When you visit this website. We use PostHog for analytics — pages viewed, roughly where in the world you are, what kind of device. Lawful basis: legitimate interests in understanding whether the site works. We do not sell any of it.

Plainly We never buy personal data, never sell it, and never share your information with anyone who wants to market to you.

Payments are taken by Stripe. Your card details go straight to Stripe and never touch our systems — we can see that a payment succeeded and the last four digits, and that's all. Stripe is its own controller for that data and has its own privacy policy.

When you pay, Stripe records that you ticked the box agreeing to our Service Terms, along with the time you did it. We keep that record for as long as we might need to rely on it.

We keep this list short on purpose, and we'll tell you if it changes:

• Stripe — payments and subscription billing.
• Cloudflare — hosting and delivery of the websites we build.
• Google — email, and the Business Profile / Search Console access you grant us.
• PostHog — website analytics.
• Our SMS provider ([TO CONFIRM: name the provider]) — sends booking reminders and review requests.
• Anthropic — drafts review replies and chatbot answers. Your data is not used to train their models.

Some of these are based outside the UK. Where that's the case, transfers are covered by the UK International Data Transfer Addendum or an adequacy decision.

Enquiries that go nowhere: 12 months, then deleted.

Client records:for as long as you're a client, then 7 years — HMRC requires us to keep financial records that long.

Your website content and photos:deleted 90 days after you leave, unless you ask us to delete them sooner. The 90 days exists so that a change of mind doesn't cost you your site.

Analytics: 14 months.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it for a particular purpose, or ask for it in a portable format. Email us and we'll do it within 30 days. There's no charge and we won't ask you why.

If we get it wrong, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd rather you told us first so we can put it right.

This site sets what it needs to function, plus PostHog analytics cookies. We don't run advertising trackers and we don't share cookie data with ad networks.

If we change anything substantive we bump the version number at the top and email current clients. We don't quietly edit old versions — the version you agreed to is the version that applies to you.