Privacy policy
This policy explains what personal data we collect when you use our website or work with us, why we use it, and the rights you have. Last updated 31 October 2026.
Who we are
Webgorgeous is the trading name of Only Intelligence Ltd, registered in England and Wales, company number 12672649. Registered office: Office 13724, 182–184 High Street North, East Ham, London E6 2JA. We are the controller of the personal data described here. You can reach us at [email protected].
What we collect
- Forms you send us: your name, email address and, if you give them, your phone number, company and website, with what you tell us (an enquiry, a consultation or trial request, a review or a newsletter sign-up).
- Project briefs: your answers about your project and any files you upload (images and PDFs). Files are checked for viruses and kept private to our team.
- Payments: Stripe takes card payments for us. We receive a record of each payment (amount, date and status) and a Stripe customer reference. We never see or store card numbers.
- Newsletter: your email address, and when and how you subscribed or unsubscribed.
- Visits to the website: Cloudflare Web Analytics counts page views (the page, the site you came from, your browser type and country) without cookies and without identifying you. Our servers and Cloudflare keep technical logs, including IP addresses, for security and to fix problems. We don’t store your IP address with anything you send us.
When we host or look after a website for a client, we may handle personal data on that client’s behalf, such as their customers’ details. That is covered by our agreement with the client (see our terms of business) and by the client’s own privacy policy.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to enquiries and consultation requests | Legitimate interests: answering people who contact us |
| Prepare estimates and quotes; deliver projects, content plans and trials | Contract, or steps you ask us to take before one |
| Take payments, send invoices and keep accounts | Contract, and our legal obligations |
| Send the newsletter | Consent, which you can withdraw at any time |
| Publish your review on our website | Consent |
| Protect our forms from spam and abuse, keep the site secure and keep backups | Legitimate interests: running a safe, reliable website |
We don’t sell personal data, use it for advertising, or make decisions about you by automated means.
Who we share it with
Only with the services we use to run the website and our work, under contracts that require them to protect it:
- Hostinger: our server, in the United Kingdom, which holds the website, our content system and the data you send us.
- Cloudflare: delivers and protects the website, checks that forms are sent by people rather than bots (Turnstile), counts visits (Web Analytics) and secures our team’s sign-in.
- Stripe: processes payments. Stripe also uses some payment data for its own purposes, such as preventing fraud; see Stripe’s privacy policy.
- SMTP2GO: sends our emails, from its servers in the European Union.
We may also share data with our professional advisers, such as our accountant, and with authorities where the law requires it.
Cloudflare and Stripe may process data outside the United Kingdom, including in the United States. Where they do, the transfer is protected as UK data protection law requires, for example by the UK Extension to the EU–US Data Privacy Framework or the UK’s International Data Transfer Addendum.
How long we keep it
- Enquiries and briefs that don’t become projects: while there’s a realistic prospect of working together. We review them at least once a year and delete those we no longer need.
- Files uploaded with a brief: deleted 90 days after the project is completed, or 90 days after we agree not to go ahead.
- Client, payment and invoice records: six years after the end of the financial year they relate to, for tax and accounting.
- Newsletter: until you unsubscribe. We then keep your address on a list of people not to email, so that you don’t hear from us again.
- Backups: copies of our data are kept for up to six months and then replaced.
- Technical logs: for a short time, for security and to fix problems.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to you or another organisation in a portable form. You can object to anything we do on the basis of legitimate interests, and withdraw consent at any time (every newsletter has an unsubscribe link). Email [email protected]; we’ll reply within one month. There is normally no charge.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first and we’ll do our best to put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Children
Our services are for businesses and adults. We don’t knowingly collect data from children.
Changes
If we change this policy, we’ll update it here and change the date at the top.
