Privacy Policy

1. Who we are

2. What data we collect

We only collect the information we need to run this site, respond to you and deliver projects. This may include:

If you become a client, we may also process limited account, billing and project information under your contract with us. That’s covered by our proposal, contract and any data processing agreement we sign with you.

3. How we use your data (and our legal bases)

Under UK GDPR we must explain our “lawful bases” for using your data. In simple terms: we only use it where we have a good reason and a legal footing.

4. Cookies & analytics

We use a small number of cookies and similar technologies on this site. When you first visit, you’ll see a banner asking about analytics. We always respect your choice.

You can block or delete cookies in your browser at any time, but some features of the site may not work properly.

5. How long we keep your data

We keep personal data only for as long as we genuinely need it. Typical retention periods are:

• • Enquiry emails and contact form messages: usually up to 24 months
• • Client and project records: typically 6–7 years after the end of our relationship (for tax and accounting)
• • Server logs and security data: usually a few weeks to a few months, unless needed for investigation
• • Analytics data: kept by Google for a limited period defined in our GA4 settings

We may keep data for longer where we need it for legal claims, audits or to comply with the law.

6. Who we share your data with

We don’t sell your data. We only share it with trusted providers who help us run our business, and only to the extent necessary.

• • Website hosting and infrastructure providers
• • Email and domain providers
• • Analytics and performance tools (for example, Google Analytics)
• • Professional advisers (accountants, legal) where necessary
• • Authorities or regulators if required by law

Where we use third parties to process personal data on our behalf, we ensure there is a contract in place and that they meet appropriate security standards.

7. International transfers

Some of our service providers (for example, Google) may process data on servers outside the UK or European Economic Area. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent protections required under UK GDPR.

8. Your rights

If you are in the UK or EU, you have a number of rights under data protection law. In most cases, you can:

• • Request access to the personal data we hold about you
• • Ask us to correct inaccurate or incomplete data
• • Ask us to delete your data in certain circumstances
• • Ask us to restrict or pause processing of your data
• • Object to certain types of processing (for example, analytics)
• • Ask us to transfer your data to another organisation (data portability)
• • Withdraw consent at any time where we rely on consent

To exercise any of these rights, email us at privacy@southcoastapps.co.uk. We’ll respond as soon as we reasonably can and within the timescales set by law.

9. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) or your local regulator.

ICO website: ico.org.uk

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in how we work or changes in the law. When we do, we’ll update the “Last updated” date at the top of the page. For significant changes, we may also add a short notice on the site.