1. Who We Are
Legacy Web Studio is a web design and digital marketing agency based in the United Kingdom, operating at legacywebstudio.co.uk. We specialise exclusively in web design and SEO services for estate planning and probate law firms.
For the purposes of UK GDPR, Legacy Web Studio is the data controller for personal data collected through this website. You can contact us at:
2. What Data We Collect
We may collect the following categories of personal data:
2.1 Data you provide directly
When you complete our contact form or book a strategy call via Calendly, we may collect:
- Full name
- Email address
- Telephone number (if provided)
- Firm or business name
- The content of your message or enquiry
2.2 Data collected automatically
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring website or search term
- Date and time of your visit
This data is collected through cookies and analytics tools (see Section 8).
2.3 Data we do not collect
We do not collect special category data (such as health, ethnicity, or religious beliefs), payment card information, or data relating to children under 16.
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Data used |
|---|---|
| Responding to your enquiry or contact form submission | Name, email, phone, message content |
| Scheduling a strategy call via Calendly | Name, email, phone (processed by Calendly) |
| Sending service-related communications | Name, email address |
| Improving our website and user experience | Automatically collected analytics data |
| Complying with legal obligations | Any data required by applicable law |
We will never sell your personal data to third parties, or use it for purposes incompatible with those stated above without obtaining your prior consent.
4. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR Article 6:
- Legitimate interests (Article 6(1)(f)): To respond to enquiries from potential and existing clients, and to improve our website and services. We have conducted a legitimate interests assessment and concluded that our interests are not overridden by your rights.
- Consent (Article 6(1)(a)): Where you have expressly opted in to receive marketing communications from us. You may withdraw this consent at any time by contacting us at the address above.
- Contractual necessity (Article 6(1)(b)): Where processing is necessary to perform a contract with you (for example, to deliver website design or SEO services).
- Legal obligation (Article 6(1)(c)): Where we are required by law to process your data (for example, financial records for HMRC).
5. Third Parties
We may share your data with the following third-party service providers strictly for the purposes described:
5.1 Google Workspace
We use Google Workspace (Gmail, Google Docs) to manage business communications. Emails sent to usman@legacywebstudio.co.uk are processed by Google LLC. Google's privacy policy is available at policies.google.com/privacy.
5.2 Calendly
When you book a strategy call through our Calendly link, your booking information (name, email, phone) is processed by Calendly LLC. Calendly's privacy policy is available at calendly.com/privacy.
5.3 GitHub Pages
This website is hosted on GitHub Pages (GitHub Inc., a subsidiary of Microsoft Corporation). GitHub may collect access logs including IP addresses as part of standard hosting operations. GitHub's privacy statement is available at docs.github.com.
5.4 Cloudflare
Our domain name is managed through Cloudflare, Inc., which may process some visitor data for the purposes of DNS resolution and DDoS protection. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
All third-party processors are contractually required to process data only on our instructions and in accordance with applicable data protection law. No data is transferred outside the UK/EEA without appropriate safeguards in place.
6. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy:
- Enquiry and contact data: Retained for up to 2 years from the date of last contact, or until you request deletion.
- Client project data: Retained for up to 6 years after the end of the business relationship, in accordance with standard UK business record-keeping requirements.
- Website analytics data: Aggregated and anonymised data retained indefinitely; individually identifiable data deleted after 26 months.
When personal data is no longer required, it is securely deleted or anonymised.
7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access: You may request a copy of the personal data we hold about you (Subject Access Request).
- Right to rectification: You may ask us to correct inaccurate or incomplete data.
- Right to erasure: You may ask us to delete your data in certain circumstances ("the right to be forgotten").
- Right to restriction of processing: You may ask us to limit how we use your data.
- Right to data portability: You may ask us to provide your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at usman@legacywebstudio.co.uk. We will respond within 30 days. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.
9. Terms of Service
By accessing and using legacywebstudio.co.uk, you agree to the following terms:
- You will use this website for lawful purposes only and will not attempt to gain unauthorised access to any part of the site or its related systems.
- The content on this website is provided for informational purposes. While we take care to ensure accuracy, Legacy Web Studio makes no warranties, express or implied, regarding the completeness or fitness of the content for any particular purpose.
- All intellectual property on this website — including text, graphics, logos, and code — belongs to Legacy Web Studio or its licensors. You may not reproduce, distribute, or create derivative works without our express written permission.
- Legacy Web Studio accepts no liability for loss or damage (including indirect or consequential loss) arising from use of, or inability to use, this website.
- Links to third-party websites are provided for convenience only. We are not responsible for the content, privacy practices, or availability of those sites.
- These terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will update the "Last updated" date at the top of this page whenever changes are made. We encourage you to review this page periodically. Continued use of the website after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
If you wish to make a Subject Access Request or lodge a complaint, please email us with the subject line "Data Request" or "Data Complaint" and we will respond within 30 days.