Privacy notice
This explains what personal information Bothy Web collects, why, and what you can ask us to do with it. We keep it to the minimum we need to build and look after websites.
Who we are
Bothy Web is a trading name of Scott Masson, a sole trader based in Scotland. Scott is the data controller for the information described here.
Contact for anything about your data: [email protected]
What we collect
- When you fill in our enquiry form: your business name, your name, email address, phone number (if you give it), a link to your Facebook page or website, and your message.
- When you email or call us: your contact details and what you tell us.
- When you become a client: the details above, your billing address, the content you give us for your website (words, photos, opening hours), and records of what you've paid.
- When we contact a business first: publicly available business contact details, such as a company's name, address, phone number and published email address, taken from sources like Companies House, Google Maps and the business's own social media pages.
Our website does not use tracking or advertising cookies, and we don't run analytics that identify you.
Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Reply to your enquiry and build your free preview | Steps before a contract, at your request |
| Build, host and look after your website; take payment | Contract |
| Keep financial records | Legal obligation (HMRC record-keeping) |
| Contact businesses that might want a website | Legitimate interests: telling local businesses about a relevant service |
We only send unsolicited marketing emails to limited companies and similar organisations, as the Privacy and Electronic Communications Regulations allow. Every message tells you who we are and how to opt out. If you ask us to stop, we stop and keep only enough to make sure we don't contact you again.
Who we share it with
We never sell your information. We use a small number of services to run the business, and they handle data on our behalf:
- Cloudflare for website hosting and email forwarding
- Web3Forms to deliver enquiry form messages to our inbox
- Google for email (Gmail) and fonts on this website
- Stripe to take card payments, if you pay by card
Some of these providers process data outside the UK, including in the United States. Where they do, they use safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
Loading this website's fonts from Google means Google receives your IP address, as it would for any website that uses Google Fonts.
How long we keep it
- Enquiries that don't go ahead: 12 months, then deleted.
- Clients: for as long as we look after your website, then financial records for 6 years to meet HMRC requirements. Your website content is handed back to you or deleted when you leave.
- Businesses we've contacted: 12 months if there's no reply. Opt-out requests are kept indefinitely so we don't contact you again.
Your rights
You can ask us to:
- give you a copy of the information we hold about you
- correct anything that's wrong
- delete your information
- stop using it for marketing, or object to how we use it
- restrict how we use it while a concern is sorted out
- send it to you or another provider in a usable format
Email [email protected]. We'll reply within one month, and there's no charge.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
If we change how we use your information, we'll update this page and the date at the top.