Privacy Notice

This Privacy Notice explains how Sunward Web Design ("Sunward Web Design", "we", "us") collects, uses, shares and protects personal data when you visit our website, contact us, or purchase our website packages. Sunward Web Design is the data controller for the personal data described here and decides why and how that data is processed.

You can reach us about anything in this notice at sunwardwebdesign@gmail.com or (248) 704-6600.

Personal data we collect

• Contact and enquiry data — your name, email address, phone number, business name, project type, budget range and the message you send through our contact form or by email.
• Client project data — the content, images, copy, logins and business details you share with us so we can build and maintain your website.
• Order and billing data — the products you purchase, order amounts, and billing confirmations. Card numbers are never collected or stored by us; payment details are collected directly by our payment provider.
• Technical and usage data — IP address, device and browser type, pages viewed, referring pages and approximate location derived from your IP, collected automatically when you use the site.
• Support correspondence — emails, call notes and messages exchanged while we support your site.

Why we use it, and our legal basis

• To respond to enquiries and process orders — legitimate interests in answering people who contact us, and steps taken at your request before entering a contract.
• To deliver, host and support your website — performance of our contract with you.
• To take payment, issue receipts and keep financial records — performance of our contract and compliance with legal obligations.
• To keep the site secure and prevent fraud or abuse — legitimate interests in protecting our business and clients.
• To improve our website packages and understand how the site is used — legitimate interests, or your consent where required for non-essential analytics.
• To send occasional service updates about work we are doing for you — legitimate interests or consent, and you can opt out at any time.

Who we share personal data with

• Payment processor. We share order, billing and payment data with Stripe, Inc. so they can securely collect payment, calculate tax, manage subscriptions, issue receipts and process refunds. Stripe handles your payment details under its own privacy policy at stripe.com/privacy.
• Service providers and subprocessors — hosting, domain, email, form handling, analytics and support tools that process data on our instructions.
• Professional advisers — accountants and legal advisers where reasonably necessary.
• Authorities — where we are required to disclose data by law or to establish, exercise or defend legal claims.

We do not sell your personal data.

How long we keep it

We keep enquiry data for up to 24 months after our last contact if the enquiry does not become a project. Client project and support records are kept for the duration of our engagement and for up to 6 years afterwards so we can answer questions, honour warranties and meet tax and accounting obligations. Technical logs are typically kept for up to 12 months. When data is no longer needed, we delete or anonymise it.

Your rights

Depending on where you live, you may have the right to request access to the personal data we hold about you, to correct inaccurate data, to request deletion, to restrict or object to certain processing, to request a portable copy, and to withdraw consent where processing is based on consent. Withdrawing consent does not affect processing carried out beforehand.

To exercise any of these rights, email sunwardwebdesign@gmail.com. We will respond within one month. If you are in the UK or EEA and are unhappy with our response, you may also complain to your local data protection supervisory authority. If any data is transferred outside the UK or EEA by us or our providers, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on the accounts and tools we use, and limiting access to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Cookies

Our site uses essential cookies and similar technologies that are required for the site and checkout to function, including cookies set by our payment provider during checkout. If we add analytics or marketing cookies, we will ask for consent where required. You can block or delete cookies in your browser settings, though parts of the site may not work correctly if essential cookies are disabled.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised, and material changes will be highlighted on this page.