Privacy Notice

Controller identity and contact details

Andre May trading as Foxden Web is a UK sole trader and the controller for Foxden Web's own business records and the activities described in this notice.

Business correspondence address: 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. Email: hello@foxdenweb.co.uk. Website: foxdenweb.co.uk.

Questions, privacy requests and complaints can be sent to hello@foxdenweb.co.uk.

Information Foxden Web may handle

Enquiries

The connected enquiry form collects your name and email address, your selected enquiry type, package preference, domain-ownership answer and preferred contact method, and any optional business name, website address, telephone number or message you supply. It also records acknowledgement of this Privacy Notice and uses a submission identifier and opening time to validate the request.

Fields marked as required are needed so Foxden Web can assess and respond to your enquiry. If they are not provided, the enquiry may not be processed.

Do not submit bank or card information, passwords, medical information, special-category information, information about children or other unnecessary sensitive information. After a written proposal or service summary has been accepted, payment details are entered separately through the secure Stripe-hosted process, not through the Foxden Web enquiry form, ordinary email, proposal or PDF.

Proposals, customers and support

Foxden Web may hold contact details, business information, correspondence, proposals, accepted contracts, project materials, website content, domain and service records, support requests, complaints, invoices, payment-status information and records of approved add-ons or third-party costs.

Stripe processes customer identity, billing, debit or credit card and other payment information under its own terms. Foxden Web may receive customer, invoice, transaction and payment-status information needed to administer the service, but does not directly collect or store full card details.

Technical and security information

Hosting and security suppliers may process technical request data, IP addresses, timestamps, device or browser information, security events and service logs needed to deliver and protect the relevant service.

Why information is used

Enquiries, previews and proposals

Respond to a request, discuss requirements, assess eligibility and prepare a requested preview, quotation or written proposal.

Lawful basis: taking requested steps before a contract where the individual is the contracting party. Legitimate interests may apply to necessary communication with a representative of a business or charity, subject to a documented assessment.

Providing the managed service

Build, launch, host, maintain, support and offboard the agreed service, including customer communication, approved suppliers and payment administration.

Lawful basis: contract where the individual is the customer; legitimate interests for necessary business-customer administration; and legal obligation where records are required by law.

Business administration and security

Keep appropriate records, protect accounts and services, prevent abuse, respond to support issues and manage complaints or disputes.

Lawful basis: legitimate interests, subject to a documented purpose, necessity and balancing assessment; legal obligation where applicable.

Invoices, tax and accounting

Administer fees, payment status, invoices and records required for accounting, tax or legal purposes.

Lawful basis: contract and legal obligation, depending on the record and purpose.

Foxden Web identifies and documents the appropriate lawful basis for each processing purpose. Reading this notice is not consent to marketing. Foxden Web does not currently send marketing emails.

How the current enquiry form works

Submitting the enquiry form sends the information through the website server and an email delivery provider to Foxden Web's business mailbox. The application does not maintain a separate enquiry database. Delivered enquiries remain in the mailbox, and hosting and delivery suppliers may retain processing and security records.

The hello@foxdenweb.co.uk mailbox receives these enquiries. Your supplied email address is used as the reply-to address. Automatic customer acknowledgement emails are currently disabled. The on-screen confirmation means the delivery service accepted the message; it does not guarantee inbox placement.

Who may process information

Website hosting

Hosts this Foxden Web website and provides related technical and security services. A UK hosting provider separately hosts standard managed customer websites and their backups.

Business email and domains

Provides Foxden Web's business mailbox and relevant domain or DNS services. Managed customer mailboxes are provided on UK-based infrastructure where included.

Enquiry delivery

Delivers website enquiries to Foxden Web. The provider processes sender and recipient details, the reply-to address, subject, enquiry content and delivery metadata.

Stripe

Provides payment, invoicing and recurring-payment services. Stripe may process customer identity, billing and payment information under its own terms. See the Stripe Privacy Policy.

Security and customer services

Provides security controls, approved plugins, booking tools, ecommerce services and other online functions where they apply to the customer's agreed website.

Standard managed website hosting, website data, managed mailboxes and hosting backups are currently provided using UK-based infrastructure. Customer-selected services may have separate processing arrangements.

Foxden Web does not sell personal information. Information may also be disclosed where reasonably necessary to professional advisers, regulators, courts or public authorities and supported by an appropriate lawful basis or legal obligation.

How long information is kept

Delivery and security records

Retained only as long as reasonably needed to verify delivery, investigate errors, prevent abuse and protect the service.

Unsuccessful enquiries

Normally up to 12 months after the last meaningful contact.

Active customers and hosted website data

Normally for the duration of the managed service.

Routine correspondence

Normally up to 24 months after the service ends, unless needed longer for a complaint, dispute or legal reason.

Proposals, contracts, invoices and payment records

For the applicable legal, accounting and HMRC retention period.

Support and security records

Only as long as reasonably required for their purpose.

Hosting and supplier logs

According to the relevant supplier's confirmed retention arrangements.

Hosting backups are normally maintained on a rolling provider-controlled schedule. Deleted information may remain temporarily within backups until the relevant backup expires or is overwritten. Records may be retained longer where reasonably required for an active complaint, legal claim, regulatory request or other legal obligation.

Security

Foxden Web uses proportionate measures including HTTPS and SSL, restricted access, data minimisation, secure hosting infrastructure, security monitoring, malware controls and provider backups. The enquiry route validates input and acknowledgement, uses a honeypot and temporary rate limiting, and does not deliberately log message bodies in application code. No measure eliminates every risk or guarantees uninterrupted availability.

Where information may be processed

Standard managed website hosting, website data, managed mailboxes and hosting backups are currently provided using UK-based infrastructure. Some other suppliers, plugins or customer-selected services may process personal information outside the UK.

Where UK data-protection law treats this as a restricted international transfer, Foxden Web relies on an applicable UK adequacy arrangement or appropriate contractual safeguards where required. Further information about relevant safeguards can be requested from hello@foxdenweb.co.uk.

Your data-protection rights

Depending on the circumstances and applicable law, a person may have rights to access personal information, correct inaccurate information, request deletion or restriction, object to processing based on legitimate interests, and receive certain information in a portable form. Where consent is used for a future purpose, it may be withdrawn.

Right to object: Where Foxden Web relies on legitimate interests, you may object to that processing. Email hello@foxdenweb.co.uk and explain your request.

These rights do not apply in every situation. The ICO provides official information about data-protection rights.

How to make a privacy request

Email hello@foxdenweb.co.uk with enough information to identify the relevant records and explain the request. Foxden Web may need to check identity before acting.

If the matter remains unresolved, the person can use the Information Commissioner's Office complaints service.

Current position

Foxden Web's website does not use visitor analytics or advertising tracking. Essential security or hosting technologies may still operate.

Non-essential analytics will not be activated without appropriate privacy information and consent controls where required. Each customer website will receive a cookie and privacy assessment based on the tools actually used. Installing a cookie plugin alone does not establish compliance unless it is configured and tested correctly.

Customer-site analytics and scheduled visitor reports are provided only where agreed in an accepted proposal. The tools, purposes, lawful basis, retention, privacy information and consent controls are assessed before activation.

Changes to this Privacy Notice

Updates will be published on this page with a revised date.