Privacy, in plain English.

This policy explains what personal data we collect, why we collect it, and what rights you have. We have kept it short and in plain English. If anything is unclear, email us and we will explain.

Who we are

Westway Studio is a trading name of Vatsalya Privet Limited, company no. 17032571, registered office 40 D'Arcy Gardens, Harrow, England, HA3 9JS. We are the "controller" of the personal data described here, which means we decide how it is used and we are responsible for it.

We are registered with the Information Commissioner's Office (ICO), registration number ZC233529.

You can contact us about anything in this policy at [email protected].

The short version

• This website sets no cookies and uses no tracking tools of any kind.
• We only get your name and email address if you choose to email us.
• We never sell your data or share it with anyone for their own purposes.
• You can ask to see, correct or delete your data at any time.

What we collect

When you visit this website. Our hosting provider, Cloudflare, processes technical information such as your IP address, browser type and the pages you request. This is needed to deliver the site to you and to protect it from attacks. We use Cloudflare Web Analytics to count visits. It does not use cookies, does not build a profile of you and only gives us totals, such as how many people viewed a page.

When you email us. We receive your name, email address and whatever you choose to include, such as your website address and details about your business.

If you become a client. We also keep your billing details, our correspondence and the content you give us for your website, such as text and photos.

Why we use it, and our lawful basis

What we do	Lawful basis under UK GDPR
Reply to your email and prepare your free homepage	Taking steps at your request before a contract, and our legitimate interest in answering enquiries
Build, host and look after your website	Performing our contract with you
Keep invoices and business records	Legal obligation (tax and company law)
Keep this website secure and count visits	Our legitimate interest in running a safe, working website

We will not send you newsletters or sales emails. We only email you about your enquiry or your project.

Who we share it with

We use a small number of trusted providers to run the business. They only process data on our instructions.

• Zoho, for our email.
• Cloudflare, for website hosting, security and cookieless visit counts.
• Our accountant and HMRC, for client invoices and tax records only.

Some of these providers may process data outside the UK. When they do, the transfer is protected by the safeguards UK law requires, such as UK adequacy regulations or approved contract terms.

How long we keep it

• Enquiries that don't go ahead: we delete the free homepage preview once you tell us you don't want it, and delete our emails with you within 12 months.
• Client records: kept for 6 years after our last invoice, as required for tax purposes.
• Hosting logs: held by Cloudflare for a short period under its own retention rules.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct anything that is wrong
• ask us to delete your data
• object to, or ask us to limit, how we use it
• ask us to send your data to you or someone else in a common format

To use any of these rights, email [email protected]. It is free and we will reply within one month.

Cookies

This website does not set any cookies, so there is no cookie banner. If that ever changes, we will update this policy and ask for your consent first where the law requires it.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.