1. Who We Are

Netspire is a website design and management service operated by Netspire Group Ltd ("Netspire", "we", "us", "our"), a company registered in England and Wales, company number 17355246.

Our registered office is 66 Paul Street, London, England, EC2A 4NA.

For the purposes of UK data protection law, we are the data controller for the personal information described in this policy, except where section 9 applies.

Contact: support@netspire.co.uk

2. What This Policy Covers

This policy explains what personal information we collect when you visit netspire.co.uk, make an enquiry, or become a client, how we use it, who we share it with, and what rights you have.

It does not cover third-party websites we link to, or websites we have built and manage for our clients. Those sites are governed by the privacy policy of the business that owns them.

3. Information We Collect

When you visit our website

• Technical information such as IP address, browser type, device type, and pages viewed

• Information collected through cookies and similar technologies (see section 8)

When you make an enquiry or complete a form

• Name, email address, telephone number, and business name

• Details about your business, your existing website, and what you are looking for

• Any other information you choose to include in your message

When you become a client

• Billing name, billing address, and email address

• Business details needed to deliver the service, including domain names, hosting and platform logins where you choose to share them, and brand assets

• Records of correspondence, support requests, and website change requests

• Payment and transaction records (see section 5)

When you contact us by WhatsApp or email

• Your message content, your phone number or email address, and the time of contact

We do not intentionally collect special category data (such as health, religious belief, or biometric data), and we ask that you do not send it to us.

4. How We Use Your Information and Our Lawful Basis

To respond to enquiries and prepare proposals. So we can answer your question and quote for the work. Our lawful basis is our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract.

To build, host, and manage your website. So we can deliver the service you have subscribed to. Our lawful basis is performance of a contract.

To take subscription payments and issue receipts. So we can collect the fees due under your subscription. Our lawful basis is performance of a contract.

To provide support and process change requests. So we can deliver the service. Our lawful basis is performance of a contract.

To keep accounting and tax records. Our lawful basis is compliance with a legal obligation.

To prevent and investigate fraud. Our lawful basis is our legitimate interests in protecting our business and our clients.

To send occasional service updates or marketing emails. Our lawful basis is your consent, or our legitimate interests where you are an existing client and the message relates to services similar to those you already receive.

To improve our website and services. So we can understand how our site is used. Our lawful basis is our legitimate interests, or your consent where cookies require it.

You can opt out of marketing at any time by using the unsubscribe link in any email or by contacting us. Opting out of marketing does not stop essential service and billing messages.

5. Payments

We use Stripe to process payments and manage subscriptions. We do not receive, process, or store your full card number. Card details are entered directly with Stripe on Stripe's secure payment pages.

To take payment, we share the following with Stripe: your name, email address, billing address, and the details of the subscription you are purchasing.

Stripe also collects information directly from you at the point of payment, including your card or bank details, and technical and behavioural information such as IP address, device information, and interaction data, which Stripe uses to detect and prevent fraud.

Where you subscribe to a recurring plan, Stripe stores a secure token that allows us to take future payments. We can see the last four digits of your card, its expiry date, and its type, but never the full number.

Stripe acts as a data processor for us in respect of the payment data we send it, and as a data controller in its own right for the purposes of fraud prevention, regulatory compliance, and its own legal obligations. Stripe's handling of your information is governed by its own privacy policy, available at https://stripe.com/privacy.

We keep records of the transactions themselves, including amounts, dates, invoice numbers, and subscription status, for accounting and tax purposes.

6. Who We Share Your Information With

We do not sell your personal information. We share it only with service providers who help us run the business, and only as far as they need it:

• Stripe, for payment processing and subscription billing

• Framer, for website hosting and analytics

• Tally, for onboarding and enquiry forms

• Notion, for the client portal, project records, and support requests

• Google, for email, file storage, and internal automation

• WhatsApp (Meta), for client support messaging, where you choose to use it

• Mailchimp, for sending marketing emails, where you have opted in

• Tide, for invoicing and bookkeeping

We may also disclose information where we are required to do so by law, or to establish, exercise, or defend legal claims.

7. International Transfers

Some of our service providers are based outside the United Kingdom, or store data outside the UK. Where personal information is transferred out of the UK, we rely on the safeguards permitted under UK data protection law, which include UK adequacy regulations and the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Details of the safeguards used by our payment processor are set out in Stripe's privacy policy and privacy centre.

8. Cookies and Analytics

Our website uses cookies and similar technologies. These fall into two groups:

• Essential cookies, which are needed for the site to function

• Analytics cookies, which help us understand how visitors use the site

We ask for your consent before setting non-essential cookies, and you can change or withdraw that consent at any time through email to support@netspire.co.uk.

Payments are taken on pages hosted by Stripe. When you are on a Stripe payment page, Stripe sets its own cookies for fraud prevention and security, governed by Stripe's privacy policy.

9. Websites We Build and Manage for Clients

Where we build or manage a website for a client, that client is the data controller for the personal information collected through their website, and we act as their data processor. We process that information only on their documented instructions, under a separate agreement.

If you are a visitor to a website we manage and want to exercise your data protection rights, please contact the business that operates the site. If you contact us instead, we will pass your request to them.

10. How Long We Keep Your Information

• Enquiries that do not become clients: 24 months from last contact

• Client records and correspondence: the duration of the subscription plus 2 years

• Invoices, payments, and accounting records: at least 6 years, to meet HMRC requirements

• Marketing consent records: until you unsubscribe, plus a record of the withdrawal

• Website analytics: 48 months

We delete or anonymise information once it is no longer needed for the purpose it was collected for.

11. Security

We use HTTPS across our website, restrict access to client information to those who need it, use multi-factor authentication on our core systems, and rely on established providers with their own security programmes. No system is completely secure, but we take reasonable steps to protect your information and to notify you and the regulator where required if something goes wrong.

12. Your Rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you

• Have inaccurate information corrected

• Request erasure of your information in certain circumstances

• Restrict or object to our processing of your information

• Receive your information in a portable format

• Withdraw consent at any time, where our processing is based on consent

To exercise any of these rights, email support@netspire.co.uk. We will respond within one month. There is normally no charge.

13. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 0303 123 1113 ico.org.uk

14. Changes to This Policy

We may update this policy from time to time. The current version is always available at netspire.co.uk/privacy, and the date at the top shows when it was last changed. Where changes are significant, we will tell existing clients by email.