Legal
Privacy policy
Last updated 24 August 2026
This policy explains what personal information Gibson Web Studio collects through this website, why we collect it, how long we keep it and what you can ask us to do with it. Gibson Web Studio is a sole trader business run by Riley Gibson, and is the data controller for the information described here. You can reach us at gibsonwebstudio@gmail.com about anything on this page.
What we collect
When you send an enquiry through the form on our Start a project page, we collect:
Your name.
Your business name, if you give one.
Your email address.
The plan you say you are interested in.
Anything you write in the message field.
If you email us directly, we hold that email and whatever is in it. If you go on to become a client, we also hold what is needed to run the project and invoice you — for example billing details, domain and hosting account details, and any content you send us for your site.
We do not ask for special category information such as health, ethnicity or political views, and you should not send it to us.
Visitor statistics and cookies
This site is built and hosted on Framer, which provides built-in analytics. That records aggregate figures such as page views, referring sites, approximate country and device type. It does not use cookies for this and does not identify you individually. We do not use Google Analytics, advertising pixels or any cross-site tracking, which is why you will not see a cookie banner here.
Framer’s servers also process technical data such as your IP address and browser user agent in their server logs, in order to serve the site securely and prevent abuse.
Why we use it, and our legal basis
To reply to your enquiry and put a quote together — our legitimate interest in responding to people who contact us, and taking steps at your request before entering a contract.
To deliver a project you have agreed to — performance of our contract with you.
To keep accounting and tax records — our legal obligation; HMRC requires records to be kept for six years.
To keep the site secure and see which pages get read — our legitimate interests.
We do not send marketing emails, and we do not sell, rent or share your information for anyone else’s marketing.
Who else can see it
We use a small number of providers who process information on our behalf:
Framer B.V. (Netherlands) — hosts this website and receives the enquiry form submissions.
Google (Gmail) — our business email.
If a project needs another provider, such as a domain registrar, a payment processor or an accountant, we share only what that job needs. Some providers process data outside the UK; where that happens it is covered by the UK’s approved transfer safeguards, such as an adequacy decision or the International Data Transfer Addendum. We may also disclose information where the law requires it.
How long we keep it
Enquiries that do not become projects: up to 12 months, then deleted.
Client records, contracts and correspondence: six years after the final invoice, to meet HMRC record-keeping rules.
Website statistics: kept by Framer in aggregate form, with no personal identifiers.
Your rights
Under UK data protection law you can ask us to give you a copy of the information we hold about you, correct anything wrong, delete it, restrict or object to how we use it, or send it to another provider in a portable format. Where we rely on legitimate interests, you can object at any time.
Email gibsonwebstudio@gmail.com to make a request. It is free, and we will respond within one calendar month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Keeping information safe
The accounts we use are protected with strong, unique passwords and two-factor authentication where it is offered, and enquiries stay in those accounts rather than on personal devices. No system is perfectly secure, but we take reasonable steps, and where the law requires it we will report a breach to the ICO and tell you.
Children
This site is aimed at business owners and is not directed at children. We do not knowingly collect information about anyone under 13.
Changes to this policy
If this policy changes we will update the date at the top of the page, and anything significant will be described here.
Contact
Gibson Web Studio — Riley Gibson, gibsonwebstudio@gmail.com. If you need a postal address for a formal data protection request, email us and we will provide one.