1. Who we are
Timeless Web Services ("we", "us" or "our") operates timelesswebservices.com. We are based in West Sussex, United Kingdom.
This policy explains what personal data we collect, why we collect it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For any data-related queries, contact us at [email protected].
2. What data we collect
We collect only what is necessary to respond to your enquiries and provide our services.
- Contact form submissions: your name, email address and anything else you choose to provide (phone number, company, service, budget and project details).
- Communication data: emails and messages you send us while discussing or carrying out a project.
- Technical data: standard server logs, including IP address, browser type and pages visited, collected by our hosting provider for security and performance. To limit spam, we store a one-way keyed hash of the IP address that submits the contact form, never the address itself.
3. How we use your data
We use your data to:
- Respond to your enquiries and provide quotations
- Carry out and manage projects you engage us for
- Send invoices and manage payments
- Comply with legal obligations
Our lawful bases are legitimate interests (responding to enquiries and protecting our site from abuse) and contract performance (where we are engaged to carry out work). We do not use your data for automated decision-making or profiling, and we never sell it.
4. Third-party services
We use a small number of trusted providers to operate this website:
- Amazon Web Services (SES): sends the emails generated by our contact form and admin area.
- Google reCAPTCHA: may be used on our forms to tell people from bots. It processes technical data such as your IP address and browser behaviour under Google's Privacy Policy and Terms.
- Our hosting and database providers: run the website and store enquiries securely.
Fonts are served from our own domain, so loading this site does not contact Google Fonts. Each provider operates under its own privacy policy and, where applicable, standard contractual clauses for international transfers.
5. Cookies
This website uses no tracking, advertising or analytics cookies. The only cookie we set is a strictly necessary session cookie for staff signing in to our admin area. Google reCAPTCHA, where enabled, may set cookies it needs to protect our forms.
6. How long we keep your data
We keep contact form enquiries for up to 12 months from receipt. If an enquiry leads to a project, we keep relevant communications for 6 years in line with UK tax and business record requirements. You can ask us to delete your data at any time.
7. Your rights
Under UK GDPR you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: have inaccurate data corrected
- Erasure: ask us to delete your data
- Restriction: ask us to limit how we use your data in certain circumstances
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
To exercise any of these rights, email [email protected]. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO).
8. Changes to this policy
We may update this policy from time to time. The "last updated" date on this page reflects any changes.