PRIVACY
POLICY

Who We Are

Websites House is a trading name of Ordnance Logistics Group Ltd, a company registered in England and Wales under company number 17048375. Our registered office is at 128 City Road, London, EC1V 2NX.

For the purposes of UK data protection law, Ordnance Logistics Group Ltd is the data controller in respect of personal data collected through this website and used in our business communications.

You can contact us at hello@websiteshouse.com.

What Data We Collect

When you submit our contact form, we collect the information listed below. For limited business-to-business outreach, we may also process a business contact's name, job title, employer or organisation, business email address, and the public professional source where we found those details.

• Full name
• Email address
• Phone number (optional)
• Ideal project timeline
• Current website address (optional)
• Budget range (optional)
• Project description (optional free-text message)

We do not collect payment information, identity documents, or any special category data. We do not run any user accounts or login systems.

Separately, when you reach one of our enquiry forms, our anti-spam check processes technical signals from your browser (including your IP address) to confirm you are not an automated system. This is described under Cloudflare, Inc. in the section below.

Analytics data

If you consent to analytics cookies, we collect pseudonymous usage data through Google Analytics 4. This includes pages visited, time on site, approximate location (country/city level), device type, and referral source. Your full IP address is not stored by Google Analytics for UK traffic, and we do not receive names, email addresses, or contact details through analytics.

How We Use Your Data

Purpose	Legal basis
Responding to your enquiry and arranging a consultation call	Legitimate interests (Article 6(1)(f) UK GDPR), taking steps at your request before entering a contract
Introducing relevant Websites House services to limited companies and relevant business contacts, and recording objections	Legitimate interests (Article 6(1)(f) UK GDPR), where personal data is involved
Understanding how visitors use our website to improve it	Consent (Article 6(1)(a) UK GDPR), only if you accept analytics cookies

We do not use your personal data for automated decision-making or profiling. We may contact limited companies and relevant business contacts about Websites House services where permitted by law. We use only the minimum business contact information needed, usually obtained from the organisation's website or another public professional source. Where personal data is involved, we rely on our legitimate interests in introducing relevant business services. Every message identifies Websites House and provides a simple way to object. We stop direct marketing when asked and retain only the minimum suppression record needed to respect that objection.

Who We Share Data With

We do not sell, rent, or trade your personal data. We share it only with the service providers below, strictly to operate this website and our business communications:

Hostinger International Ltd.

Our website is hosted by Hostinger, which also provides mail routing for one of our business aliases. Hostinger processes website server logs and any correspondence routed through that alias.

Google Workspace

Email sent to and from hello@websiteshouse.com is handled by Google Workspace. Google processes the contents of that correspondence so that we can receive and answer enquiries. Google acts as a data processor on our behalf.

Formspree Inc.

Contact form submissions are processed by Formspree, a US-based form handling service. Formspree receives your submitted data, stores it temporarily on its servers, and forwards it to our email address. Formspree acts as a data processor on our behalf.

Cloudflare, Inc.

Our enquiry forms are protected against automated abuse by Cloudflare Turnstile. When you reach a form, Turnstile receives technical signals from your browser — including your IP address, User-Agent header, TLS fingerprint, and the site key and origin of the page — so that it can assess whether the request is likely to come from a bot. It does not receive the contents of your enquiry. Cloudflare states that the purpose of collecting these signals is "not to identify, profile or target any individuals but solely to detect and block bots". Cloudflare acts as a data processor on our behalf. Further detail is set out in the Cloudflare Turnstile Privacy Addendum.

Google Analytics

If you consent to analytics, usage data is sent to Google LLC via Google Analytics 4. Google acts as a data processor for this service. We receive pseudonymous and aggregated analytics reports; we do not receive names, email addresses, or contact details through analytics.

International Data Transfers

Formspree, Google and Cloudflare are based in the United States. Hostinger's terms also provide for appropriate transfer safeguards where applicable. Transfers of personal data outside the United Kingdom are made under appropriate safeguards in accordance with UK GDPR, including reliance on the UK-US Data Bridge (where applicable), the UK Addendum, and/or Standard Contractual Clauses approved under UK law.

How Long We Keep Your Data

Enquiry data submitted via our contact form is retained for a maximum of 12 months from the date of submission, after which it is deleted from our systems and we request deletion from Formspree's dashboard.

Unanswered prospect data is retained for a maximum of 12 months after our last contact. If someone objects to outreach, we retain only the minimum suppression record needed to prevent accidental recontact.

If your enquiry leads to a project engagement, we may retain relevant correspondence for the duration of the engagement plus a further 12 months.

Analytics data is retained by Google according to the retention settings we have configured (26 months), after which it is automatically deleted.

Cookies and Similar Technologies

We use analytics cookies only with your consent. We also use limited local storage and session storage to remember consent, reduce repeat form submissions, support the mobile preloader, remember mobile theme preference, and handle page transitions. Cloudflare Turnstile may set a strictly necessary cookie on our enquiry pages to carry out its bot check; this is not used for analytics or advertising, and strictly necessary cookies do not require consent. For full details, please see our Cookie Policy.

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Access: request a copy of the data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data ("right to be forgotten")
• Portability: request your data in a machine-readable format
• Restriction: ask us to limit how we use your data
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw analytics consent at any time using the Cookie settings link in the site footer

To exercise any of these rights, email us at hello@websiteshouse.com. We will respond within one calendar month.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

ICO website: ico.org.uk  ·  Helpline: 0303 123 1113

Changes to This Policy

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page. If a change affects how we use consent-based technologies, we will ask for consent again where required.

Contact

For any data protection queries, please contact us at:

Ordnance Logistics Group Ltd t/a Websites House
128 City Road, London, EC1V 2NX
hello@websiteshouse.com