Privacy Policy

Who we are

The Website Whisperer is a UK-based website design and development business operated by Joshua Twigger, trading as “The Website Whisperer” (sole trader). You can contact us at contact@website-whisperer.com. For the purposes of UK data protection law, Joshua Twigger is the data controller for any personal data collected through this website.

What data we collect

When you use the contact form on this site, we collect the information you submit: your name, your email address, your business name (if you give one) and the contents of your message. When you send the form, a security check run by Cloudflare (Turnstile) helps distinguish genuine visitors from automated or abusive traffic, and your IP address is used briefly to limit repeated or abusive submissions; your IP address is not saved with your enquiry. The security check is loaded only when you scroll to or use the contact form. We do not collect any other personal data through the site beyond standard, anonymised technical data gathered automatically for analytics purposes (see “Analytics and cookies” below).

Why we collect it, and our lawful basis

We use the information you submit via the contact form solely to respond to your enquiry and, where relevant, to discuss and deliver a website or web application project with you. Our lawful basis for processing this data is legitimate interests — namely, responding to enquiries from prospective and existing clients. If your enquiry leads to a paid engagement, we may also rely on performance of a contract for related processing at that stage.

How long we keep it

When you send an enquiry, it is saved in our own enquiry database and a copy is emailed to us. The saved record is deleted automatically 12 months after we receive it, or sooner if you ask us to delete it. The emailed copy is kept in our business mailbox only for as long as needed to respond to your enquiry and, if you become a client, for the duration of our working relationship plus a reasonable period afterwards for record-keeping.

Who we share it with

We do not sell or rent your personal data. It is shared only with the service providers who help us run this website and our business:

• Vercel Inc. — hosts this website and runs the service that receives contact form enquiries.
• Supabase — hosts the database where contact form enquiries are saved.
• Resend — delivers the email that tells us about a new enquiry.
• Cloudflare — runs the Turnstile security check on the contact form.
• Microsoft 365 — hosts our business email, where we read and reply to enquiries.

We use these providers to process data as part of providing their services to us. Their handling of personal data is governed by their applicable terms and data-processing arrangements.

International data transfers

Some of the providers above process personal data outside the United Kingdom. In particular, Resend, which sends us the email about your enquiry, states that its primary processing takes place in the United States. Resend relies on the UK International Data Transfer Addendum to the standard contractual clauses in its data processing agreement and is certified to the UK Extension to the EU-U.S. Data Privacy Framework. Our other providers may also process data outside the UK; where they do, we rely on the transfer safeguards that UK data protection law requires, such as those providers’ own contractual terms.

Analytics and cookies

This site uses Vercel Analytics to understand overall visitor traffic. Vercel Analytics is cookieless — it does not use tracking cookies or collect personally identifiable information, and does not track you across other websites. Because it doesn’t rely on cookies, no cookie consent banner is required for this feature. We do not use advertising or targeting cookies, and we do not run ad tracking of any kind on this site. The contact form’s Cloudflare security check is used only to prevent abuse.

Your rights

Under UK GDPR, you have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, and to object to or restrict how we use it. To exercise any of these rights, contact us at contact@website-whisperer.com. If you’re unhappy with how we’ve handled your data, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Changes to this policy

We may update this policy from time to time as the site or our business practices change. The “Effective date” above shows when it was last revised.