Legal

Privacy Policy

How we collect, use and protect your personal data when you use shawfair.dev.

Last updated: April 2026

1. Who we are

shawfair.dev is a local web design and digital marketing studio based in Shawfair, Midlothian, Scotland. We provide web design and development, lead funnel creation, social media management and digital marketing services to businesses across Midlothian and Edinburgh.

For the purposes of the UK General Data Protection Regulation (UK GDPR), shawfair.dev is the data controller. If you have any questions about how we handle your data, please contact us at hello@shawfair.dev or call 0131 381 0100.

2. What information we collect

Information you give us

When you complete our contact form or get in touch directly, we may collect:

  • Your name
  • Your email address
  • Your phone number (if provided)
  • Your business name and type
  • Details of your enquiry or project
  • Your approximate budget and how you found us

Information collected automatically

When you visit our website, we may automatically collect technical data including your IP address, browser type and version, pages you visited, time and date of your visit, and referring URL. This data is collected via Google Analytics through Google Tag Manager and is used in aggregate — we do not identify individual visitors.

3. How we use your information

  • To respond to your enquiry — when you contact us, we use your details to reply and discuss your requirements
  • To deliver our services — if you become a client, to fulfil the services we have agreed to provide
  • To improve our website — using aggregated, anonymised analytics data to understand how visitors use our site and where we can improve
  • To send relevant information — only where you have explicitly indicated you would like to hear from us

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We rely on the following legal bases under UK GDPR:

  • Legitimate interests — to respond to enquiries from potential clients and to improve our website and services
  • Contract performance — to deliver services you have engaged us to provide
  • Consent — for any marketing communications and for non-essential cookies, which you may withdraw at any time
  • Legal obligation — where we are required to retain records by law (for example, financial records)

5. Cookies and tracking

Our website uses cookies and similar technologies. Cookies are small text files placed on your device that help us understand how you use our website.

We use the following types of cookies:

  • Essential cookies — necessary for the website to function correctly; these cannot be disabled
  • Analytics cookies — placed by Google Analytics to help us understand visitor behaviour in aggregate, with IP anonymisation enabled
  • Tag management — Google Tag Manager is used to deploy and manage tracking scripts on our site

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

6. Third-party services

We use the following third-party services which may process data on our behalf:

  • Google Tag Manager & Google Analytics (Google LLC) — website analytics and tag management. Data may be transferred to and stored in the United States under Google's Standard Contractual Clauses. Google's privacy policy: policies.google.com/privacy
  • Web hosting provider — our website is hosted on servers located within the UK or EEA

We do not sell, rent or share your personal data with third parties for their own marketing purposes.

7. Data retention

We retain personal data only for as long as is necessary for the purpose for which it was collected:

  • Enquiry and contact form data is retained for up to 2 years from the date of your enquiry
  • Client project and financial records are retained for 6 years in line with standard UK business requirements
  • Website analytics data is retained in accordance with the data retention settings configured in Google Analytics (typically 14 months)

8. Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access — you can request a copy of the personal data we hold about you (a Subject Access Request)
  • Right to rectification — you can ask us to correct inaccurate or incomplete data
  • Right to erasure — you can request deletion of your data where there is no compelling reason for continued processing
  • Right to restriction — you can ask us to limit how we process your data in certain circumstances
  • Right to data portability — you can request a structured, machine-readable copy of data you have provided to us
  • Right to object — you can object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting processing carried out before withdrawal

To exercise any of these rights, please contact us at hello@shawfair.dev. We will respond within one calendar month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. All data transmitted to and from our website is encrypted using HTTPS (TLS). However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any website you visit.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please get in touch: