Privacy & cookies

The contact form collects your name, company, email address, the service you selected, your budget range and your project details. Nothing else, and nothing is inferred.

That message is emailed to our studio inbox and kept there while we are in touch and for as long as we may need it for our records. It is not added to a mailing list, not sold, and not shared with anyone outside the studio. The legal basis is our legitimate interest in answering an enquiry you chose to send.

The website request form collects your name, phone or WhatsApp number and email address, your business name and type, and the choices you make for the site: package, template, pages, colours and language. If you choose to, it also takes your business address, brand name, existing website or Facebook page, a domain you own, the best time to call, notes, and the files you upload (logo, brand guidelines, photos).

We use all of it to build your website and to contact you about it. The legal basis is your consent, which you give when you send the form, and the steps you asked us to take before a contract. Web-Graphix Ltd receives everything you send; it is not sold or shared outside the studio.

Files you upload but never send are deleted from this website after 24 hours. Files you send are deleted from the website once we have copied them, or after 14 days at the latest. Your request and its files are kept for 90 days after your site is delivered, then deleted. Your IP address is used only to limit how many requests can be sent in an hour, and is kept as a one-way hash, not stored with your request.

If you accept analytics cookies, Google Analytics records which pages you visit, roughly where you are (country or city level, from a truncated IP address), and what kind of device you use. We look at it in aggregate to see which work is worth doing more of. We never try to identify an individual visitor, and we have not enabled advertising, remarketing or profiling features.

If you decline, no analytics cookie is written and nothing is stored on your device. Google still receives an anonymous, cookie-less signal that a page was viewed, which it uses only to estimate totals. It cannot be tied back to you or followed from one page to the next.

The contact form and the website request form are protected by Google reCAPTCHA v3, which loads only on those two pages and only when you get there. It looks at how the page was used to score how likely it is that a person, rather than a bot, filled the form. That check is subject to Google's privacy policy and terms. It is a security measure and runs whether or not you accept analytics; without it the form would be unusable within days.