Privacy Policy

Who we are

Edwin Projects ("we", "us") is a web design and development studio based in the United Kingdom, operating edwinprojects.com. We are the data controller for the personal data described in this policy. You can reach us at hello@edwinprojects.com.

What we collect

• Enquiry details - name, email, phone, project type, page count, current website, social links, budget range and your message, submitted through our contact form.
• Client onboarding details - company name, contact name, email, brand colours, social links, website copy and any files you upload (logo, brand guidelines, imagery and video).
• Account details - if you create an account to save your onboarding progress, we store your email address and a saved draft of your form. Passwords are handled by our authentication provider and are never visible to us.
• Technical data - basic server and error logs generated when you use the site.

Why we use it

• To respond to your enquiry and prepare a quote (legitimate interest / pre-contract).
• To deliver and support the website we build for you (contract).
• To save and restore your onboarding progress when you ask us to (contract).
• To keep the site secure and working correctly (legitimate interest).

We do not sell your data, and we do not use it for advertising or automated decision making.

Who we share it with

We use a small number of trusted processors to run the site: a cloud database, file storage and authentication provider, and an email delivery provider used to notify us of new form submissions. They process data only on our instructions. We may also disclose data where we are legally required to.

How long we keep it

Enquiries are kept for up to 24 months from your last contact with us. Client project data is kept for the duration of the project and for up to 6 years afterwards where we need it for legal, accounting or support reasons. Saved onboarding drafts are deleted on request or within 12 months of inactivity.

Cookies

We do not use advertising or tracking cookies. If you create an account, your browser stores a session token so you stay signed in. Clearing your browser storage removes it.

Your rights

You can ask us to access, correct, delete, restrict or port your personal data, and you can object to processing based on legitimate interests. Email hello@edwinprojects.com and we will respond within 30 days. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ico.org.uk).

Security

Data is stored on access-controlled infrastructure, transmitted over HTTPS, and uploaded files are held in a private storage bucket. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

Changes

We may update this policy from time to time. The date at the top shows when it was last revised. Questions? Get in touch.