Privacy Policy

Last updated: 20 September 2025

This Privacy Policy explains how Havant Digital collects and uses your information when you visit our website, contact us, or work with us on web projects, Local SEO, speed and Core Web Vitals, care plans and hosting, and AI automation.

Who we are

Controller: Havant Digital

Contact: Havant, Hampshire, United Kingdom

Phone: 07543 450130

Email: [email protected]

What information we collect

• Contact and project details such as your name, business name, email, phone, website URL, goals, and service selections.
• Access needed to deliver work such as temporary WordPress logins, hosting, domain or DNS, analytics, and payment gateway access. We recommend unique accounts and 2FA.
• Messages and files sent via forms, email, WhatsApp, or chat, including brand assets and content you provide.
• Payment context such as amounts, invoice status, and last 4 digits of a card if shown by the processor. We do not store full card numbers.
• Device and usage data such as pages viewed, referral source, approximate location, and browser information collected by privacy friendly analytics.
• Log and security data such as IP address and user agent to prevent abuse and for troubleshooting.
• Care plan and hosting telemetry such as uptime checks, backup logs, plugin and core version data, and error events for supported sites.

We do not seek special category data. Please avoid sending it. If you include it by accident, we will delete or minimise it.

How we use your information

• To provide services project scoping, builds, fixes, care plan maintenance, and support.
• To communicate proposals, confirmations, reminders, progress updates, and replies to your messages.
• To take payment and keep records invoicing, accounting, and tax compliance.
• To improve the site measuring which pages are useful so we can fix issues.
• To keep systems secure monitoring logs, detecting abuse, and troubleshooting.

Legal bases under UK GDPR

• Contract to provide the services you requested and to take steps at your request before entering a contract.
• Legitimate interests basic analytics, security, improving our website, and running our business. We balance this against your rights and minimise data.
• Consent for optional cookies and for marketing messages where required.
• Legal obligation tax and accounting records.

When we act as a processor

For care plans, hosting help, or certain integrations we may process personal data on your behalf, for example website visitor or customer data in your tools. In those cases you are the controller and we follow your written instructions. A simple data processing addendum is available on request.

How long we keep information

• Enquiries with no project up to 24 months.
• Project and invoice records typically 6 years for tax and accounting.
• Access credentials we generate removed at handover or within 30 days of project completion unless you ask us to retain them for a care plan.
• Staging sites usually deleted within 90 days of launch.
• Backups for care plans retained on rolling schedules, commonly 30 to 90 days.
• Analytics and logs usually 12 to 24 months depending on tool settings.

Who we share information with

We work with a small number of service providers who process data on our behalf. We only share what is needed for them to provide their services and they must protect it appropriately.

• Hosting and backups to run servers, staging, and secure backups.
• Email, DNS, and delivery to send proposals, invoices, and notifications.
• Payment processing to take card and wallet payments securely.
• Analytics to understand site usage in a privacy friendly way.
• CRM, helpdesk, and chat to manage conversations and support.
• Automation tools to connect systems and send alerts.
• Subcontractors for specialist tasks. They are under confidentiality and data protection commitments.

International transfers

Some providers may process data outside the UK or EEA. Where this happens we use appropriate safeguards such as approved contractual clauses and risk assessments.

Jump to our Cookies section • Change cookie settings

Cookies and similar technologies

We use cookies that are necessary to run the site and optional analytics cookies if enabled. You can manage non essential cookies via the cookie banner. Blocking essential cookies may break parts of the site.

Our analytics are privacy friendly. We prioritise cookieless or minimal data collection where possible. If analytics cookies are used, they only run with your consent and we honour your choices.

Marketing

We mainly send service messages. If we ever send marketing by email or SMS we will ask for your consent and you can opt out at any time. If we run ads, we record conversions where lawful and respect your cookie choices.

Your rights

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your data where it is no longer needed.
• Restrict or object to certain processing.
• Data portability for data you provided to us.
• Withdraw consent where we rely on consent.
• Complain to the UK Information Commissioner if you are unhappy. We would appreciate a chance to resolve it first.

How to exercise your rights

To exercise your rights, contact us at [email protected]. We may need to verify your identity. We aim to respond within one month.

Security

We use encryption in transit, access controls, server hardening, regular updates, and least privilege access. We limit access to personal data to people who need it to do their job.

Children

Our services are aimed at businesses and adults responsible for a business. We do not knowingly collect data from children.

Changes to this policy

We may update this page to reflect changes to our services or the law. If the changes are significant we will provide a clear notice on the site.