Privacy Policy

Last updated: 2 November 2026

This Privacy Policy explains how Webmaken (“Webmaken”, “we”, “us” or “our”) collects, uses and protects personal data when you visit our website, contact us, book a call or work with us on a website design, development, SEO or content project. We aim to process personal data in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who is responsible for your data

Webmaken is the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your data, you can contact us at [email protected].

2. What personal data we collect

Information you give us

• Contact and enquiry forms: your name, email address, company name, website URL, project details and any other information you choose to include in your message.
• Call bookings: your name, email address, preferred date and time, and any notes you add when you book a call through our scheduling tool.
• Email and project communication: the content of emails and files you send us, and information needed to deliver a project (for example, website content, login details for platforms you ask us to work on, and billing contact details).
• Job applications: if you apply through our careers page, your CV, portfolio links and the information you include in your application.

Information collected automatically

• Usage data: pages visited, time spent on pages, referring website, browser type, device type, approximate location (derived from your IP address) and similar technical information.
• Cookies and similar technologies: see section 8 below.

3. How we use your data and our legal bases

• To respond to enquiries and book calls — based on steps taken at your request before entering into a contract, or our legitimate interest in responding to business enquiries.
• To deliver projects and services (website design, development, CMS work, SEO, content production, Google Business Profile management and custom Shopify development) — based on the performance of our contract with you.
• To send invoices and keep business records — based on our legal obligations (for example, tax and accounting rules).
• To understand how our website is used and improve it — based on your consent where analytics cookies require it, or otherwise our legitimate interest.
• To send occasional updates about our services — based on your consent or, for existing clients, our legitimate interest. You can opt out at any time.
• To protect our website, prevent misuse and enforce our terms — based on our legitimate interests and, where applicable, legal obligations.

Where we rely on consent, you can withdraw it at any time by contacting us. This does not affect processing carried out before you withdrew consent.

4. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above:

• Enquiries and call bookings that do not lead to a project: typically up to [24] months after our last contact.
• Client and project records: for the duration of the project and any support period, and afterwards for as long as required by accounting, tax or other legal obligations.
• Job applications: typically up to [12] months, unless you agree to a longer period.
• Analytics data: in line with the retention settings of our analytics provider, typically [14] months.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers (processors) who help us run our business and who are bound to protect it, such as:

• Website hosting providers that host this website and its forms.
• Email providers we use to send and receive messages.
• Analytics providers (for example, Google Analytics) that help us understand how visitors use our website.
• Scheduling tools used to book calls with us.
• Project, file-sharing and accounting tools used to manage projects and invoices.

When delivering a project, we may also handle data on platforms you choose (such as Shopify, WordPress, Webflow or Wix). Those platforms process data under their own terms and privacy policies. We may also disclose data where required by law or to protect our legal rights.

6. International data transfers

Some of our service providers may process data outside the European Economic Area (EEA) or your own country. Where this happens, we take steps to ensure appropriate safeguards are in place, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.

7. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted (HTTPS) connections, access controls and limiting access to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please avoid sending sensitive passwords by email; we will suggest a safer method when access to your platforms is needed.

8. Cookies

Cookies are small files stored on your device. We use:

• Essential cookies needed for the website to work and stay secure.
• Analytics cookies that help us understand how visitors use the website, used only with your consent where the law requires it.
• Third-party cookies that may be set by embedded tools such as our scheduling tool.

You can manage or delete cookies through your browser settings. Blocking some cookies may affect how parts of the website work.

9. Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access — to request a copy of the personal data we hold about you.
• Rectification — to have inaccurate or incomplete data corrected.
• Erasure — to ask us to delete your data in certain circumstances.
• Restriction — to ask us to limit how we use your data.
• Portability — to receive your data in a structured, commonly used, machine-readable format.
• Objection — to object to processing based on our legitimate interests, including direct marketing.
• Withdraw consent — at any time, where we rely on consent.
• Complaint — to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

To exercise any of these rights, email [email protected]. We may need to verify your identity and will respond within the time required by law, usually within one month.

10. Children’s privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Links to other websites

Our website may link to other websites, including client websites in our portfolio. We are not responsible for the privacy practices of those websites.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the “Last updated” date shown at the top.

13. Contact us

If you have questions about this Privacy Policy or your personal data, please email [email protected]. See also our Terms & Conditions and Refund Policy.