Skip to content

Privacy Policy

Last updated: 4 September 2026

Introduction

The privacy of our visitors is very important to us. We are the data controller for the personal information described in this policy.

This policy explains what personal information we collect, why we collect it, how long we keep it, and what rights you have.

Information we collect

Information you give us

When you fill in a contact or enquiry form, we collect the details you enter. This usually includes your name, email address, telephone number, and whatever you write in the message field. Some forms also let you upload a photo or document.

Information collected automatically

Like most websites, we record certain information in server log files. This may include your IP address, browser type, internet service provider, referring and exit pages, operating system, and the date and time of your visit.

Cookies

We use cookies to help the site work properly, remember your preferences, and understand how the site is used. Cookies are small files stored on your device. You can control cookies through the banner shown on your first visit, or through your browser settings.

Turning off cookies may affect how parts of this site work.

How we use your information

  • To reply to enquiries and provide the services you have asked about
  • To provide customer support
  • To monitor and improve how the website performs
  • To protect our forms and website from spam and automated abuse
  • To send marketing communications, where you have agreed to receive them

Our lawful basis for processing

  • Consent for marketing emails and for non-essential cookies. You can withdraw consent at any time.
  • Legitimate interests for responding to enquiries, keeping the website secure, and understanding how the site is used.
  • Contract where we are providing services you have engaged us for.
  • Legal obligation where we must keep records for tax or accounting purposes.

Bot protection

We use Cloudflare Turnstile to protect our forms from automated abuse. Turnstile runs invisibly in the background and checks whether a visitor is likely to be a person rather than a bot.

To do this, it processes a small set of technical signals, including your IP address, TLS fingerprint, user agent header, and the site key for this website. Cloudflare states that it cannot directly identify individuals from these signals, and that they are not used to identify, profile or target anyone.

Cloudflare acts as our data processor when protecting this website, and as a data controller when using the same signals to improve its own bot detection. For more detail, see the Cloudflare Turnstile Privacy Addendum.

Our forms also include a hidden field that is not visible to visitors. If it is completed, we treat the submission as automated and discard it.

Who we share information with

We do not sell, trade or rent your personal information.

We share information with service providers who help us run the website and our business. These include our website hosting provider, our email delivery provider, and analytics and security services such as Google Analytics and Cloudflare. These providers process data on our instructions.

We may share anonymous, aggregated statistics that cannot identify you with partners and advertisers.

We may also disclose information where we are legally required to do so.

Advertising

We may work with third party advertising partners who serve adverts on other websites based on your visit to ours. These partners do not receive your name, postal address, email address or telephone number from us.

International transfers

Some of our service providers are based outside the UK. Where personal data is transferred outside the UK, we rely on approved safeguards such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep your information

  • Enquiry form submissions: up to 24 months from your last contact with us, unless you become a client.
  • Client records: for the length of our working relationship and then for 6 years, to meet accounting and legal requirements.
  • Marketing contacts: until you unsubscribe or ask us to remove you.
  • Server logs and analytics: typically 26 months or less.

Your rights

Under UK data protection law you have the right to:

  • Ask what personal information we hold about you and request a copy
  • Ask us to correct information that is wrong or incomplete
  • Ask us to delete your information in certain circumstances
  • Ask us to restrict how we use your information
  • Object to processing based on our legitimate interests
  • Ask us to transfer your information to another provider
  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us using the details below. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

We take reasonable steps to protect the information we hold from unauthorised access, use or disclosure. This includes encrypted connections and restricted access to enquiry data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Our services are not aimed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us their information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page. Please check back occasionally to stay informed.

Contact us

If you have any questions about this policy or how we handle your information, please contact us:

First Place SEO

Or use our contact form.