Privacy Policy
This Privacy Policy explains how Pay Monthly Websites collects, uses, and protects your personal data when you use our website or enquire about our services. We are committed to handling your information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Pay Monthly Websites is a web design business based in Manchester, England. We provide affordable, pay-monthly website design services for UK small businesses.
- Trading name: Pay Monthly Websites
- Website: paymonthlywebsites.io
- Address: Bartle House, Oxford Court, Manchester, England, M2 3WQ
- Email: info@paymonthlywebsites.io
- Phone: 0161 706 2853
For the purposes of UK GDPR, Pay Monthly Websites is the data controller of the personal data collected through this website.
2. Data We Collect
We collect personal data in the following ways:
2.1 Information you provide to us
When you complete an enquiry form or contact form on our website, we collect:
- Your full name
- Your email address
- Your phone number (optional)
- Your business name
- Your industry or business type
- Your current website address (if applicable)
- A description of what you are looking for
- Whether you already have a website
2.2 Information collected automatically
When you visit our website, we or our third-party tools may automatically collect:
- Your IP address
- Browser type and version
- Pages visited and time spent on each page
- Referring website or search engine
- Device type and operating system
This information is collected through cookies and analytics tools. See Section 8 (Cookies) for more detail.
2.3 Information from Google Ads
If you arrive at our website via a Google Ads advertisement, Google may share aggregated, anonymised data with us about ad performance. This does not identify you personally.
3. How We Use Your Data
We use the personal data we collect to:
- Respond to your enquiry and assess whether our service is a good fit for your business
- Contact you by email or phone to discuss your website requirements
- Provide the website design service you have requested
- Manage our ongoing business relationship with you
- Send you relevant information about your project or service updates
- Improve our website and the quality of our services
- Comply with our legal and regulatory obligations
We will not use your data for unsolicited marketing, and we will not sell, rent, or trade your personal information to any third party for their own marketing purposes.
4. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
- Legitimate interests — to respond to business enquiries and assess whether our services match your needs (Article 6(1)(f)). We have assessed that our legitimate interest does not override your rights and freedoms.
- Pre-contractual and contractual necessity — to take steps at your request prior to entering into a contract, and to fulfil our obligations under a service agreement (Article 6(1)(b)).
- Consent — where you have explicitly agreed to us processing your data, for example by ticking a consent checkbox on our enquiry form (Article 6(1)(a)). You may withdraw consent at any time by contacting us.
- Legal obligation — where we are required to process your data to comply with a legal requirement (Article 6(1)(c)).
5. Sharing Your Data
We do not sell or share your personal data with third parties for their own marketing purposes. We may share your data in the following limited circumstances:
5.1 Service providers
We use the following third-party services to operate our business. These providers act as data processors on our behalf and are contractually bound to handle your data securely:
- Hostinger — website hosting and email delivery (SMTP). Hostinger processes data to transmit your enquiry to our inbox. See Hostinger's Privacy Policy.
- Google Analytics / Google Ads — we may use Google's tools to understand how visitors find and use our website. Data is processed in accordance with Google's Privacy Policy.
5.2 Legal requirements
We may disclose your personal data if required to do so by law, or in response to a valid request from a law enforcement or regulatory authority.
5.3 Business transfers
In the event that Pay Monthly Websites is acquired, merged with another business, or its assets are transferred, your personal data may be transferred to the new owner as part of that transaction.
6. How Long We Keep Your Data
We retain your personal data for no longer than is necessary for the purposes for which it was collected:
- Enquiry data (no contract entered): Up to 12 months from the date of your initial enquiry, after which it is securely deleted.
- Customer data (contract entered): For the duration of our service agreement plus up to 6 years after the contract ends, in line with our legal obligations under UK law (e.g. tax and accounting records).
- Analytics data: As set by the relevant third-party provider (typically 26 months for Google Analytics).
After the applicable retention period, data is securely deleted or anonymised.
7. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 12.
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct any inaccurate or incomplete data.
- Right to erasure — you can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
- Right to restriction — you can ask us to restrict how we use your data in certain circumstances.
- Right to data portability — where processing is based on consent or contract and carried out by automated means, you can request a copy of your data in a structured, machine-readable format.
- Right to object — you can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the UK's data protection supervisory authority, the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
9. External Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and recommend you review their privacy policies before providing any personal data.
10. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our website is served over HTTPS (SSL/TLS encryption). Enquiry data is transmitted via encrypted email using Hostinger's SMTP infrastructure.
While we take these precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but are committed to taking appropriate steps to protect your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please contact us:
- Email: info@paymonthlywebsites.io
- Phone: 0161 706 2853
- Post: Pay Monthly Websites, Bartle House, Oxford Court, Manchester, England, M2 3WQ
We will respond to all requests within 30 days.