Privacy Policy

Resolute Websites ("we", "us", "our") is a web-design studio operated as a sole trader by Fraser Arthur MacCuish, based in Coupar Angus, Scotland. We are the "data controller" for the personal information described in this policy — meaning we decide what is collected and how it's used.

If you have any questions about this policy or your information, contact us at hello@resolutewebsites.co.uk. Our postal address is available on request.

When you contact us. If you fill in our enquiry form or email us, we collect your name, email address, phone number (if you provide one), and the contents of your message.

When you become a client. If you go on to work with us, we collect the information needed to deliver and administer the project — for example your business details, billing information, and any content or materials you share with us for your website. Access to your client area is managed through our authentication provider (see "Who we share information with" below).

Payments. If you make a payment to us, it is handled by our payment provider. We don't see or store your full card details — only a record that a payment was made, along with limited information such as the amount and date.

Automatically. Our website uses a small number of strictly necessary cookies to keep it secure and working (see "Cookies" below). We do not use advertising or tracking cookies.

Under UK data protection law we must have a "lawful basis" for using your information. Ours are:

• Responding to your enquiry — to reply to you and discuss your project. Lawful basis: our legitimate interests in responding to people who contact us.
• Providing our services — to plan, build, host, and maintain your website and manage our working relationship. Lawful basis: performance of a contract with you.
• Sending service emails — for example, confirming we've received your enquiry, or contacting you about your project. Lawful basis: legitimate interests and performance of a contract.
• Keeping business records — such as invoices and correspondence, to meet our accounting and tax obligations. Lawful basis: legal obligation.

We will only use your information for the purposes we collected it for. We do not sell your information, and we do not use it for automated decision-making.

We use a small number of trusted service providers ("processors") to run our business. They process information on our behalf, under contract, and only for the purposes we set:

• Supabase — our database, where enquiries and project information are stored. Hosted in Ireland, within the European Economic Area.
• Vercel — hosts our website.
• Google (Gmail) — we use email to send and receive messages, including enquiry notifications.
• Clerk — manages secure sign-in to the client area.
• Stripe — processes payments.

We may also share information where we are legally required to — for example, with HMRC, or in response to a lawful request.

Your information is stored in Ireland, within the European Economic Area (EEA), which the UK recognises as providing an adequate level of data protection. Some of our service providers are based outside the UK and EEA and may process limited information abroad. Where they do, we rely on appropriate safeguards — such as UK-approved contract terms (the International Data Transfer Agreement or Addendum) or an adequacy decision — to keep your information protected.

We keep information only as long as we need it:

• Enquiries that don't become projects — up to 12 months, after which we delete them.
• Client and project records — for the duration of our work together, and afterwards for up to 6 years to meet tax and accounting requirements.

When information is no longer needed, we delete it securely.

We take reasonable steps to protect your information. Our website runs over an encrypted (HTTPS) connection, access to our systems is restricted and protected, and we use reputable providers who maintain their own security standards. No system can be guaranteed completely secure, but we work to protect your information against loss, misuse, and unauthorised access.

Under UK data protection law you have the right to:

• Be informed about how we use your information (this policy).
• Access the information we hold about you.
• Rectification — ask us to correct information that's wrong or incomplete.
• Erasure — ask us to delete your information, in certain circumstances.
• Restrict or object to our use of your information, in certain circumstances.
• Data portability — ask for a copy of certain information in a portable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email us at hello@resolutewebsites.co.uk. We'll respond within one month, and there's normally no charge.

Our website uses only strictly necessary cookies — for example, to keep the site secure and to manage sign-in to the client area. These don't require consent, because the site can't work properly without them. We don't use cookies for advertising or cross-site tracking.

If you're unhappy with how we've handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

• Website: ico.org.uk
• Helpline: 0303 123 1113

We may update this policy from time to time. When we do, we'll change the "last updated" date at the top. Significant changes will be made clear on this page.