Privacy Policy

    Last updated: 7 April 2026

    1. Who We Are

    Grass Media Web Design ("we", "us", "our") is a web design agency based at Ashbee Studios, 43 Ashbee Gardens, Herne Bay, Kent CT6 6TX. We are the data controller for the personal data we process. You can contact us at [email protected] or call 07525 013666.

    2. What Data We Collect

    We may collect the following personal data:

    • Contact information — name, email address, phone number, business name
    • Enquiry details — information you provide via our contact form or email
    • Technical data — IP address, browser type, operating system, pages visited, referring URL
    • Cookies — see our Cookie Policy for details

    3. How We Use Your Data

    We process your personal data for the following purposes:

    • To respond to your enquiries and provide quotes
    • To deliver our web design and related services
    • To send you information about our services where you have consented
    • To improve our website and services
    • To comply with legal obligations

    4. Legal Basis for Processing

    Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases:

    • Consent — where you have given clear consent for us to process your data for a specific purpose
    • Contract — where processing is necessary for a contract we have with you or to take steps at your request before entering into a contract
    • Legitimate interests — where processing is necessary for our legitimate business interests, provided these are not overridden by your rights

    5. Data Sharing

    We do not sell your personal data. We may share your data with:

    • Trusted service providers who assist us in operating our website and delivering services (e.g. hosting providers, email services)
    • Professional advisers such as accountants or legal advisers
    • Law enforcement or regulatory bodies where required by law

    All third-party processors are required to process your data in accordance with UK data protection law.

    6. Data Retention

    We retain your personal data only for as long as necessary for the purposes for which it was collected. Contact form enquiries are retained for up to 24 months. Client project data is retained for the duration of our business relationship plus 6 years for legal and accounting purposes.

    7. Your Rights

    Under UK GDPR, you have the following rights:

    • The right to access your personal data
    • The right to rectification of inaccurate data
    • The right to erasure ("right to be forgotten")
    • The right to restrict processing
    • The right to data portability
    • The right to object to processing
    • Rights related to automated decision-making and profiling

    To exercise any of these rights, please contact us at [email protected].

    8. Data Security

    We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. However, no method of transmission over the internet is 100% secure.

    9. International Transfers

    Your data may be processed by service providers located outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK data protection law.

    10. Complaints

    If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

    11. Changes to This Policy

    We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

    Call us