Privacy Policy

Introduction

This privacy notice explains how we collect and use your personal data when you use our website, https://pocketsite.co.uk, or buy our services.

By providing us with your data, you confirm that you are over 13 years of age.

Sophie Wood, trading as Buzz Web Consultancy and Pocket Site, is the data controller. We are responsible for your personal data (referred to as “we”, “us” or “our” in this notice).

Contact details

Sophie Wood, Buzz Web Consultancy, 24 Altrincham Road, Wilmslow, Cheshire SK9 5ND

Email: sophie@buzzwebconsultancy.co.uk

It is important that the information we hold about you is accurate and up to date. Please let us know if your personal information changes by emailing sophie@buzzwebconsultancy.co.uk.

What data we collect, why, and our lawful basis

Personal data means any information capable of identifying an individual. It does not include anonymised data. We may process the following categories of personal data about you.

Communication Data is any communication you send us, whether through our website contact form, email, text, social media messages or posts. We use it to reply to you, keep records, and establish, pursue or defend legal claims. Our lawful basis is our legitimate interests in replying to communications, keeping records and handling legal claims.

Customer Data is data about purchases of our services, such as your name, title, billing address, email address, phone number and purchase details. We use it to supply the services you have bought and keep records of those transactions. Our lawful basis is the performance of a contract between you and us, or taking steps at your request before entering into one. Card payments are handled by our payment provider, [name your provider, e.g. Stripe]; we do not see or store your full card details.

User Data is data about how you use our website and online services, and anything you post for publication on them. We use it to run our website, keep it secure, maintain back-ups, and administer our website and business. Our lawful basis is our legitimate interests in properly running our website and business.

Technical Data is data about your device and your use of our website, such as your IP address, browser details, pages viewed, length of visit and time zone. It comes from our analytics system. We use it to understand how our website is used so we can improve it and keep it secure. Our lawful basis is our legitimate interests in running and improving our website. Where we use Technical Data for advertising, we only do so with your consent (see Cookies below).

Marketing Data is data about your preferences for receiving marketing from us and your communication preferences. We use it to send you marketing you have agreed to or are entitled to receive, and to run promotions such as competitions and free give-aways. Our lawful basis is our legitimate interests in growing our business, or your consent where the law requires it.

Advertising. We may use Technical Data and Marketing Data to show you relevant adverts (including Facebook and other display adverts) and to measure how well they work. This relies on advertising cookies or tracking pixels, so we only do it with your consent, which you give or refuse through our cookie banner. You can withdraw consent at any time.

Sensitive data

We do not collect any sensitive data about you through your use of our website. Sensitive data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, and genetic and biometric data. We do not collect information about criminal convictions and offences.

If you do not provide your data

Where we need personal data by law, or under the terms of a contract with you, and you do not provide it, we may not be able to perform the contract. In that case we may have to cancel a service you have ordered, and we will tell you at the time.

Change of purpose

We will only use your personal data for the purpose we collected it for, or a compatible purpose. If we need to use it for an unrelated new purpose, we will tell you and explain the lawful basis for doing so. We may process your personal data without your knowledge or consent where this is required or permitted by law.

We do not carry out automated decision-making or profiling.

How we collect your personal data

We collect data you give us directly, for example when you fill in forms on our website or email us. We also collect some data automatically as you use our website, using cookies and similar technologies. See Cookies below and our cookie policy for details.

We may receive data from third parties, including:

• analytics providers such as Google, based outside the UK
• advertising networks such as Meta (Facebook), based outside the UK
• providers of technical and payment services

We may also receive data from publicly available UK sources such as Companies House.

Marketing communications

We send marketing communications on the basis of your consent or our legitimate interests in growing our business.

Under the Privacy and Electronic Communications Regulations (PECR), we may send you marketing emails if:

• you bought from us or asked us about our services, and we gave you a chance to opt out when we collected your details; or
• you agreed to receive marketing from us,

and in either case you have not opted out since. If you are a limited company, we may send you marketing emails without your consent, but you can still opt out at any time.

We will get your express consent before sharing your personal data with any third party for their own marketing.

You can ask us to stop sending you marketing at any time by using the unsubscribe link in any marketing email or by emailing sophie@buzzwebconsultancy.co.uk. Opting out of marketing does not affect data we hold for other reasons, such as your purchases.

Who we share your data with

We may share your personal data with:

• service providers who host our website and provide IT, email and system administration services
• our payment provider
• our analytics provider
• professional advisers, including our accountant, lawyers, bankers and insurers
• HMRC and other authorities where the law requires us to

We require everyone we share your data with to keep it secure and to treat it in line with the law. They may only use it for specified purposes and on our instructions.

International transfers

We are subject to the UK GDPR and the Data Protection Act 2018, as updated by the Data (Use and Access) Act 2025. Some of our service providers are based outside the UK. Where we transfer your personal data outside the UK, we make sure it is protected by one of the following:

• the country has been approved by the UK Government as providing adequate protection for personal data;
• for US providers, the provider is certified under the UK Extension to the EU-US Data Privacy Framework; or
• we use contracts approved for UK transfers, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Data security

We have security measures in place to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without permission. Only people with a business need can access your personal data, and they must keep it confidential and act only on our instructions.

We have procedures for dealing with any suspected personal data breach. We will tell you and the Information Commission about a breach where we are legally required to.

How long we keep your data

We keep your personal data only for as long as we need it for the purposes we collected it for, including to meet legal, accounting or reporting requirements.

To decide how long to keep data, we consider how much there is, how sensitive it is, the risk of harm from unauthorised use or disclosure, why we process it, whether we can achieve that another way, and any legal requirements.

By law, we must keep basic records about our customers (your Customer Data) for six years after the end of the financial year in which you stop being a customer, for tax purposes.

In some circumstances we may anonymise your personal data for research or statistical purposes. Once anonymised, it no longer identifies you, and we may use it indefinitely without further notice to you.

Your rights

Under data protection law you have the right to:

• be informed about how we use your personal data
• access your personal data
• have inaccurate data corrected
• have your data erased
• restrict how we use your data
• data portability (receive your data in a usable format or have it sent to another organisation)
• object to how we use your data
• rights relating to automated decision-making
• withdraw your consent at any time, where we rely on consent
• complain to us, and to the Information Commission

You can read more about these rights on the Information Commission’s website. To use any of them, email sophie@buzzwebconsultancy.co.uk.

You will not usually have to pay a fee. We may charge a reasonable fee, or refuse your request, if it is clearly unfounded or excessive.

We may ask for information to confirm your identity before we act on your request. This makes sure personal data is not disclosed to anyone who has no right to it. We may also ask you to clarify your request.

How long we take to respond. We will respond within one month of receiving your request. If your request is complex, or you have made several requests, we may extend this by up to two further months, and we will tell you why within the first month. If we need to confirm your identity or ask you to clarify your request, the time limit starts once we have that information. When you ask for a copy of your data, we will carry out a reasonable and proportionate search.

How to complain

If you are unhappy with how we have collected or used your personal data, please tell us first so we can try to put it right. You can:

• use our contact form and choose “Data protection concern”, or
• email sophie@buzzwebconsultancy.co.uk, or
• write to us at the address above.

We will acknowledge your complaint within 30 days of receiving it. We will then look into it without undue delay, keep you updated on our progress, and tell you the outcome.

If you are not satisfied with our response, you have the right to complain to the Information Commission (formerly the Information Commissioner’s Office), the UK regulator for data protection, at ico.org.uk.

Cookies

We use cookies and similar technologies on our website. Under PECR, some of these need your consent and some do not.

Cookies we set without asking for consent:

• Strictly necessary cookies that the website needs to work, such as keeping it secure and remembering your cookie choices.
• Analytics cookies used only to collect statistics about how our website is used, so we can improve it.
• Preference cookies used only to remember how you like the website to look or work.

You can opt out of analytics and preference cookies at any time through the cookie settings link on our website.

Cookies we only set with your consent:

• Advertising and tracking cookies and pixels, such as the Meta (Facebook) pixel, used to show you relevant adverts and measure how well they work.

You can give, refuse or withdraw consent through our cookie banner or the cookie settings link at any time. You can also set your browser to refuse cookies, but some parts of our website may not work properly if you do.

For a full list of the cookies we use, see our cookie policy.

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third parties and are not responsible for their privacy notices. Please read the privacy notice of every website you visit.

Changes to this notice

We keep this privacy notice under review and will update it when the law or our practices change.

Last updated: 25 September 2026.