Privacy Policy

Business name: SME Web Designs Ltd
Website: smewebdesigns.com
Data controller: Brent, SME Web Designs Ltd
Contact: admin@smewebdesign.com
Last updated: 18 May 2026

1. Who I am

I am Brent, operating as SME Web Designs Ltd (“I”, “me”, “my”). I am the data controller for personal information collected through this website. If you have any questions about how I handle your data, you can contact me at admin@smewebdesign.com.

2. What data I collect and why

Contact form

When you use the contact form on this website, I collect:

• Your name – to address you personally in my reply
• Your email address – to respond to your enquiry
• Your message – to understand what you need and provide a relevant response

I do not collect any other personal data, and there is no user account, login, comments section, or e-commerce functionality on this site.

Website analytics (Google Analytics 4)

I use Google Analytics 4 (GA4), provided by Google LLC, to understand how visitors use this website. If you accept analytics cookies, GA4 may collect:

• Pages visited and time spent on each page
• How you arrived at the site (e.g. a search engine, a direct link)
• Approximate geographic location (country and city level only – not your precise address)
• Device type, operating system, and browser

GA4 does not collect your name, email address, or any information that directly identifies you. All data is aggregated and used solely to improve the website’s content and performance.

GA4 only runs if you have consented to analytics cookies via the cookie banner. You can withdraw consent at any time by revisiting the cookie preferences on this site.

Technical and anti-spam data (CleanTalk)

I use CleanTalk, an anti-spam service, to protect the contact form from automated spam submissions. CleanTalk may collect your IP address, email address, and certain browser/device signals at the point of form submission. This data is processed by CleanTalk to assess whether a submission is spam. CleanTalk may store this data on servers outside the UK/EEA. For full details, see CleanTalk’s Privacy Policy.

Cookie consent data (CookieYes)

I use CookieYes to manage cookie consent on this site. CookieYes records your consent preferences (what you accepted or declined) so that your choice is remembered on future visits. The data it collects is limited to consent records and is stored securely. For full details, see CookieYes’s Privacy Policy.

3. Legal basis for processing

Under UK GDPR, I need a lawful basis to process your personal data. The bases I rely on are:

I have carried out a legitimate interests assessment (LIA) for the processing activities above and concluded that my interests do not override your rights and freedoms, given the limited nature of the data and the reasonable expectation that submitting a contact form will result in a reply.

4. Cookies

This website uses cookies. A cookie is a small text file placed on your device when you visit a website.

Strictly necessary cookies

These are set automatically and do not require your consent:

• CookieYes – stores your cookie consent preferences (cookieyes-consent). This is essential for the consent banner to function.
• CleanTalk – sets cookies such as apbct_timestamp and ct_pointer_data to collect behavioural signals that help identify spam bots. These are necessary for form protection.

Analytics cookies (require consent)

These are only set if you accept analytics cookies via the cookie banner:

• Google Analytics 4 – sets _ga (expires 2 years) and _ga_KQL1EYMEKD (expires 2 years) to distinguish unique visitors and track sessions. No personally identifiable information is stored in these cookies.

Managing your cookie preferences

You can accept, decline, or change your cookie preferences at any time using the cookie banner on this site. You can also use the Google Analytics opt-out browser extension to prevent GA4 from collecting data about your visits across all websites that use it.

5. Who I share your data with

I do not sell, rent, or trade your personal data. I may share it only in the following limited circumstances:

• Google LLC (Google Analytics 4) – if you consent to analytics cookies, anonymised usage data is shared with Google for analytics purposes. See section 6 for information about international transfers.
• CleanTalk – form submission data (IP address, email, browser signals) is passed to CleanTalk for spam filtering. CleanTalk’s servers may be located outside the UK/EEA; CleanTalk states it is GDPR-compliant. See their privacy policy for details.
• CookieYes – consent records are processed by CookieYes and stored in AWS data centres. See their privacy policy for details.
• Legal requirements – if I am required by law or a court order to disclose your data, I will do so.

No other third parties receive your personal data.

6. International transfers

Some third-party processors I use operate outside the UK:

• Google LLC (Google Analytics 4) – data may be processed in the United States. Google relies on Standard Contractual Clauses (SCCs) approved under UK GDPR as the transfer mechanism. See Google’s data transfer information.
• CleanTalk – data may be processed on servers in the United States. CleanTalk states compliance with GDPR transfer requirements. See their privacy policy for details.

If you would like more information about the safeguards in place for a specific transfer, please contact me.

7. How long I keep your data

After the applicable retention period, data is deleted or anonymised.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access – you can ask me for a copy of the personal data I hold about you.
• Right to rectification – you can ask me to correct inaccurate or incomplete data.
• Right to erasure – you can ask me to delete your data in certain circumstances.
• Right to restriction – you can ask me to stop processing your data in certain circumstances while a dispute is resolved.
• Right to object – you can object to processing based on legitimate interests.
• Right to data portability – where technically feasible, you can ask for your data in a structured, machine-readable format.
• Right to withdraw consent – where processing is based on consent (e.g. analytics cookies), you can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact me at admin@smewebdesigns.com. I will respond within 30 days.

9. Right to complain

If you are unhappy with how I handle your personal data, you have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

I would appreciate the opportunity to address your concern directly before you contact the ICO, so please reach out to me first.

10. Children’s data

This website is not directed at children under the age of 13, and I do not knowingly collect personal data from children. If you believe a child has submitted data to me, please contact me and I will delete it promptly.

11. Changes to this policy

I may update this policy from time to time, for example if my services change or if the law requires it. The most current version will always be available at smewebdesigns.com/privacy-policy. The “last updated” date at the top of this page will reflect any changes.

12. Contact

For any questions about this privacy policy or your personal data:

Brent
SME Web Designs Ltd
Email: admin@smewebdesigns.com
Website: smewebdesigns.com