Privacy and data handling

Privacy notice

This notice explains what personal information Better Business Websites receives through the website, why it is used, how long it may be kept and the rights available to you.

Last reviewed: 29 September 2026

Who is responsible for your information

Better Business Websites is responsible for personal information handled through this website and acts as the data controller.

Better Business Websites is an independent UK practice. Privacy questions and data-protection requests can be sent using the privacy contact on this page.

Information this website may collect

When you browse the website

The hosting platform may process technical information needed to deliver and protect the website. This can include an IP address, request time, requested URL, browser or device information, and security or error information contained in standard server logs.

Better Business Websites does not currently use website analytics, advertising trackers, behavioural profiling or third-party marketing pixels.

When you send an enquiry

The enquiry form may collect your name, work email address, business name, role, website address, information about the business and its customers, the reason for the enquiry, current website problems, desired outcomes, likely project type, budget, timing, communication preference, optional phone number and how you found Better Business Websites.

Please keep passwords, confidential case material, special- category information and personal information that is unnecessary for the enquiry out of the form.

When you use a policy-page contact form

The privacy, terms and accessibility contact forms collect your name, email address and message, together with the source page needed to route the message correctly.

Please avoid including passwords, confidential case material, special-category information or other personal information that is not needed for the question or request.

When correspondence continues

Further information may be received if you reply by email, WhatsApp or SMS, request a proposal, or discuss a possible or active project.

This website is intended for adults making contact in a business capacity. It is not directed at children.

How information is used

Personal information may be used to:

  • read, assess and respond to an enquiry;
  • decide whether a project appears suitable for both parties;
  • provide information, estimates, proposals or requested next steps;
  • communicate about a possible or active project;
  • protect the enquiry form and website from spam, abuse and technical attacks;
  • diagnose delivery or security failures;
  • maintain necessary business correspondence;
  • establish, exercise or defend legal claims; and
  • meet applicable legal, accounting or tax obligations.

Enquiry information is not added to a marketing list, sold to another organisation or used for automated decision-making or profiling.

Lawful bases for processing

The lawful basis depends on the reason the information is being handled.

Steps requested before a contract

Information may be used where you ask Better Business Websites to consider a project, answer questions, prepare an estimate or take other steps before a possible contract.

Legitimate interests

Information may be used where necessary for the legitimate interests of operating a secure website, responding to relevant business enquiries, protecting the service from abuse and keeping proportionate records of business correspondence.

Legal obligation

Information may be retained or disclosed where this is necessary to comply with an applicable legal, accounting or tax obligation.

The privacy acknowledgement on the enquiry form is not consent to marketing. Better Business Websites does not currently operate an email-marketing list through this website.

Storage, sharing and retention

Successful enquiry delivery

A successful enquiry is accepted by the authenticated email service and delivered to the Better Business Websites enquiry mailbox, with an internal delivery copy sent for resilience. An acknowledgement is then attempted to the address supplied by the visitor.

After successful delivery, identifiable enquiry content is held as email correspondence only. The website does not retain the enquiry body in a database, file outbox, retry queue, application log or permanent server-side session.

Policy-page contact delivery

A successful privacy, terms or accessibility message is delivered through the same authenticated email service to the Better Business Websites mailbox, with the contact type and source page included for routing. These compact forms do not send an automatic acknowledgement email.

The message body is not written to a website database, file outbox or retry queue. Proportionate technical delivery and rate-limit records may be kept without storing the message itself.

Temporary form state

If validation or delivery fails, form values may be held temporarily in the website session so the form can be shown again with your entries preserved. This recovery state is short-lived and is not a permanent enquiry archive.

Operational and anti-abuse records

Delivery logging is limited to a random receipt identifier, timestamp, delivery stage, outcome and non-sensitive error category. These operational events are retained for seven days.

Rate limiting uses a salted, one-way client key so the application’s rate-limit record does not store a raw IP address. The record contains only short-lived counters and timestamps needed to prevent repeated form abuse.

Email retention

Enquiry emails that do not lead to work are normally deleted within 12 months of the last substantive contact. Records connected with clients, contracts, payments, accounting, tax, disputes or legal obligations are kept for the period required by the relevant obligation or a legitimate need to establish or defend legal claims.

Who information may be shared with

Information is handled by Better Business Websites and may be processed by the website-hosting and email-service providers where necessary to host the website and deliver correspondence. It may also be disclosed to professional advisers, insurers, courts, regulators or public authorities where reasonably necessary or legally required.

Website-hosting and email providers may process information in the locations covered by their service arrangements. Better Business Websites does not intentionally send enquiry information to analytics, advertising, CRM or marketing platforms. Where a service arrangement involves a restricted international transfer, the appropriate legal safeguards will be required.

Cookies and technical information

The website currently uses no analytics or advertising cookies.

The enquiry journey uses a strictly necessary session cookie named BBWEBSESSID. It supports CSRF protection, validation recovery, temporary messages and duplicate-submission protection, and is not used for advertising or cross-site tracking.

Website Health Check

When you use the checker, the address you submit is reduced to the website origin before inspection. The service makes a small number of server-side requests to public website responses. It may temporarily process the normalized website origin, resolved public connection addresses, response metadata and technical evidence needed to produce the report. It does not require an email address and does not produce an AI-generated score.

The checker uses a dedicated strictly necessary BBWEBHCSESSID cookie scoped to /website-check/. Its session-bound report reference lasts for up to one hour. Shared successful technical results may be cached for 30 minutes and transient failure results for 5 minutes. Anti-abuse counters use a salted derived client key rather than storing the raw visitor IP in checker application records. Minimal checker operational logs are retained for up to 7 days. The checker does not make automated legal, commercial or profiling decisions.

The hosting provider may maintain standard technical logs for security, availability and troubleshooting. These are retained only for as long as needed for those operational purposes or an applicable legal obligation.

Your data-protection rights

Depending on the circumstances and lawful basis, you may have the right to ask for:

  • access to personal information held about you;
  • correction of inaccurate or incomplete information;
  • deletion of information in certain circumstances;
  • restriction of processing in certain circumstances;
  • an objection to processing based on legitimate interests; and
  • transfer of information where the right to data portability applies.

To make a request, use the privacy contact on this page. Identity may need to be confirmed before information is disclosed or changed.

Please raise a concern with Better Business Websites first so it can be investigated. You also have the right to complain to the Information Commissioner’s Office through its data-protection complaints service .

Changes to this notice

This notice will be reviewed when the website, enquiry process, service providers or legal obligations materially change. The review date at the top of the page will be updated when the notice changes.