Privacy notice
Last updated: 16 October 2026
This notice explains how Valley Websites collects, uses and protects personal information. Valley Websites is run by Jack Agnew, a sole trader based in Pontypridd, South Wales. I'm the controller of the personal information described here. You can contact me at jack@valleywebsites.co.uk.
Information I collect
| Whose information | What I collect | Where it comes from |
|---|---|---|
| People who contact me | Name, business name, email address, website address, and anything you include in your message | You, when you email me |
| Businesses I may contact about my services | Business name, website, business contact details, publicly listed contact names, and notes about issues I've found on the business's website | Publicly available sources such as the business's own website, Google Maps and Companies House |
| Clients | Contact details, billing and payment information, and correspondence about your project | You, during our work together |
| Visitors to this website | Technical information such as your IP address and browser type | Automatically, through my website host and font provider (see below) |
How I use it, and why
- To reply to your enquiry and provide a free website check you've asked for. Legal basis: legitimate interests (responding to people who contact me), or steps taken at your request before entering into a contract.
- To contact businesses about my services. I only contact businesses using business contact details, and every message tells you how to opt out. Legal basis: legitimate interests (promoting my business to other businesses). I follow the UK's electronic marketing rules: I only send unsolicited marketing emails to limited companies and similar organisations, and contact sole traders and partnerships by other means unless they've agreed to emails.
- To provide services to clients, including building and looking after websites, invoicing and keeping records. Legal basis: performing our contract, and legal obligations such as keeping tax records.
- To run this website securely. Legal basis: legitimate interests (keeping the site working and secure).
I don't sell personal information, and I don't use it for automated decision-making.
Cookies
This website doesn't set cookies or use analytics or advertising tracking. If that changes, I'll update this notice and ask for consent where the law requires it.
Who I share it with
I use a small number of trusted service providers to run my business. They only process information on my behalf:
- Netlify hosts this website and receives visitors' technical information, such as IP addresses.
- Google provides my email (Google Workspace) and the fonts used on this website, which means your browser connects to Google's servers when the page loads.
- My accountant, bank and payment providers, where needed to manage payments and keep business records.
Some of these providers process information outside the UK, including in the United States. Where that happens, the transfer is protected by the safeguards UK law requires, such as the UK–US data bridge or approved contract terms.
How long I keep it
- Enquiries and prospect notes: up to 2 years from our last contact, unless you become a client. If you ask me not to contact you, I keep a minimal record so I don't contact you again.
- Client records: 6 years after our work ends, to meet tax and accounting requirements.
Your rights
You have the right to access the personal information I hold about you, to have it corrected or deleted, to restrict or object to how I use it, and to receive a copy in a portable format. You can object to direct marketing at any time, and I'll stop. To use any of these rights, email jack@valleywebsites.co.uk. I'll respond within one month.
Complaints
If you're unhappy with how I've handled your information, please contact me first so I can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Websites I build for clients
When I build or look after a website for a client, the client is responsible for the personal information their website collects, and their own privacy notice applies. I act on their behalf as a processor for that information.