Privacy Policy

1. Who we are

SwiftFrame Webworks is a web design and development studio based in Exeter, Devon, United Kingdom. We can be contacted at info@swiftframe.xyz.

2. What data we collect

We collect personal data only when you choose to provide it. This includes:

• Contact form submissions — your name, email address, phone number (optional), business name, and the information you include in your message.
• Analytics data — aggregated data about how visitors use our site, collected only if you accept analytics cookies. This may include pages visited, time on site, and general geographic region. We do not build individual user profiles and we do not use analytics data for advertising.
• Server logs — our hosting provider automatically logs technical request data, including your IP address, browser type, and the pages requested. This happens for every visitor as a necessary part of serving and securing the site, and is not used to identify you.

We do not collect payment information directly. Any payments are processed by Stripe, which operates under its own privacy policy.

3. How we use your data

We use the data you submit to:

• Respond to your enquiry or request for a free homepage mockup
• Communicate about a project if we proceed to work together
• Improve our website and services, using anonymised analytics data

We do not sell, rent, or trade your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We process contact form data on the basis of legitimate interests — specifically, to respond to an enquiry you have voluntarily submitted. Server logs are also processed on the basis of legitimate interests, to keep the site secure and available. Analytics data is processed only on the basis of your consent, given via the cookie banner when you first visit the site. No analytics are loaded unless and until you accept.

5. Data retention

Contact enquiries are retained for up to 24 months from the date of contact, after which they are deleted. If we enter a client engagement, project correspondence may be retained for up to 6 years in line with standard UK business record-keeping requirements.

6. Third-party services

We use the following third-party services that may process your data:

• Web3Forms — to receive contact form submissions. Form data passes through their servers; see their privacy policy for details.
• Vercel — our hosting provider. Serves all web traffic and may log request metadata such as IP addresses for security purposes.
• Google Fonts — fonts are requested from Google's servers when a page loads, which means your IP address is shared with Google. See Google's privacy policy for details.

International transfers

Some of these providers are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on the safeguards those providers have in place — such as the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework — to ensure your data receives an equivalent level of protection.

7. Your rights

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict how we process your data
• Withdraw consent for analytics cookies at any time, using the Cookie Settings link in the footer of any page

To exercise any of these rights, email us at info@swiftframe.xyz. We will respond within one month, as required by UK GDPR.

8. Cookies

For full details about how we use cookies, please see our Cookie Policy.

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the “last updated” date at the top.