Privacy Policy

This Privacy Policy explains how Magal Web Design ("we", "us" or "our"), collects, uses, stores and protects personal data.

It applies to personal data processed in connection with:

• our website;
• enquiries and communications with us;
• our web design, website development, hosting, maintenance and related services; and
• our business administration and marketing activities.

This Policy explains what personal data we collect, why we use it, the legal bases we rely on, who we may share it with, how long we retain it and your rights under applicable data protection law.

This Policy does not apply to third-party websites, applications or services that we do not control. You should review the privacy policies of third parties you choose to use.

The data controller responsible for your personal data is:

• Trading name: Magal Web Design
• Email: hello@magalweb.com

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, the data controller is the person or organisation responsible for determining how and why personal data is processed.

If you have questions about this Policy or wish to exercise your data protection rights, please contact us using the details above.

Depending on how you interact with us, we may collect:

• Contact information: your name, business or organisation name, email address, telephone number, postal or business address and other contact details you provide.
• Enquiry and communications information: the content of enquiries, project requirements and preferences, information provided during calls, meetings and emails, and records of communications between you and us.
• Client and project information: information needed to provide web design, development, hosting, maintenance and support services, manage projects and deadlines, communicate with you, prepare quotations, proposals and contracts, and manage our business relationship.
• Payment and financial information: information relating to payments, invoices and billing. Payment card details may be processed directly by third-party payment providers. We do not generally store full payment card details ourselves.
• Technical and usage information: depending on the technologies used and your cookie choices, this may include your IP address, browser and device information, operating system, approximate location derived from your IP address, pages visited, referral source, visit dates and times, website interactions and information collected through cookies and similar technologies.
• Marketing information: if you subscribe to marketing communications, your name, email address, marketing preferences and information about your interaction with those communications, where applicable.

We may use personal data to:

• respond to enquiries and discuss your requirements;
• provide information about our services;
• prepare quotations, proposals and contracts;
• take steps at your request before entering into a contract;
• provide and manage our web design, development, hosting, maintenance and support services;
• manage projects, communications and our business relationship with you;
• issue invoices and administer payments;
• maintain financial records and comply with tax, accounting and other legal obligations;
• operate, maintain, secure and improve our website and systems;
• prevent fraud, abuse or misuse and investigate security incidents;
• troubleshoot technical issues and maintain appropriate backups;
• improve our website and services;
• send marketing communications where we have a lawful basis to do so; and
• establish, exercise or defend legal claims where necessary.

Where analytics or similar technologies require consent, we will obtain the necessary consent before using them.

You may unsubscribe from marketing communications at any time using the unsubscribe option provided or by contacting us.

Depending on the circumstances, we may rely on the following lawful bases:

• Contract: where processing is necessary to enter into or perform a contract with you.
• Legitimate interests: where processing is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your interests or fundamental rights and freedoms. This may include responding to enquiries, managing business relationships, operating and securing our systems, preventing fraud or misuse, improving services, managing business administration and establishing, exercising or defending legal claims.
• Legal obligation: where processing is necessary to comply with legal, tax, accounting or regulatory obligations.
• Consent: where required by law, including for certain non-essential cookies and similar technologies and marketing communications. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

We may share personal data where necessary with trusted third parties, including:

• website hosting and cloud storage providers;
• email and communications providers;
• project management and customer relationship management providers;
• website security, analytics and backup providers;
• cookie consent management providers;
• accounting and bookkeeping providers;
• payment processors and financial service providers; and
• professional advisers, including accountants, auditors, legal advisers and insurers.

Where third parties process personal data on our behalf, we take appropriate steps to ensure suitable contractual and data protection safeguards are in place where required by law.

We may also disclose personal data where necessary to comply with a legal obligation or lawful request, establish, exercise or defend legal claims, or protect our rights, property or safety.

We do not sell your personal data.

Some service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we take appropriate steps to ensure the transfer is lawful and appropriate safeguards are in place where required by applicable data protection law.

These safeguards may include a UK adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless we are legally required to retain it for longer.

Retention periods depend on the type of information and why we hold it. Generally:

• enquiry and communication information is retained for as long as reasonably necessary to manage the enquiry or relationship and for a reasonable period afterwards where appropriate;
• client and project information is retained for as long as necessary to provide services, manage the relationship and deal with potential disputes or legal obligations;
• financial, tax and accounting records are retained for the period required by applicable legal and tax obligations;
• marketing information is retained until you unsubscribe or withdraw consent, unless another lawful basis applies or the information is no longer required; and
• cookie and analytics information is retained according to the settings and retention periods of the relevant technology and your consent choices.

We regularly review the personal data we hold and delete or anonymise information when it is no longer reasonably required.

Subject to legal conditions and exemptions, you may have the right to:

• be informed about how your personal data is used;
• access personal data we hold about you;
• have inaccurate or incomplete personal data corrected;
• request erasure of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• receive or request transfer of your personal data where the legal requirements for data portability are met;
• object to certain processing, including processing based on legitimate interests;
• withdraw consent where processing is based on consent; and
• exercise rights relating to automated decision-making and profiling, where applicable.

We do not currently use your personal data to make decisions about you based solely on automated processing that produces legal or similarly significant effects. If this changes, we will provide information required by law and explain your relevant rights.

To exercise your rights, contact us using the details in Section 2. We may need to verify your identity. We will generally respond within one month, although this period may be extended where permitted by law.

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.

These measures may include access controls, password protection, secure systems and services, appropriate authentication, backups, security updates and limiting access to those who need personal data for legitimate business purposes.

No method of transmission or storage is completely secure, but we regularly review and improve our security measures where appropriate.

Our website may contain links to third-party websites, applications, plug-ins or services.

Those third parties may collect and process personal data under their own privacy policies. We are not responsible for the privacy or security practices of third-party websites or services that we do not control.

We recommend reviewing the privacy and cookie information of third-party services before providing personal data or allowing them to place cookies or similar technologies on your device.

Our services are primarily directed towards businesses and professional clients. We do not knowingly seek to collect personal data from children.

If you believe a child has provided us with personal data, please contact us so that we can investigate and take appropriate action.

We may update this Privacy Policy to reflect changes in our services, technologies, data processing activities, legal or regulatory requirements or privacy practices.

When we update this Policy, we will update the "Last reviewed" date. Where appropriate, we will provide additional notice of material changes.

If you have questions about this Policy, our use of personal data or our privacy practices, please contact:

Magal Web Design

Email: hello@magalweb.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

We would, however, appreciate the opportunity to address your concerns first where possible.

Last reviewed: 24/07/2026