Legal & Compliance

Privacy Policy

Last Updated: 26 August 2026

Kestrel Web Solutions ("we", "us", or "our"), operated by Derek Phillips and based in Haverfordwest, Pembrokeshire, Wales, is dedicated to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following categories of information when you interact with our website or services:

  • Direct Contact Data: Name, business name, email address, telephone number, and message contents provided through our online contact forms or via direct email/telephone communication.
  • Project & Technical Details: Domain names, hosting account parameters, website asset requirements, and billing addresses necessary to deliver web design, hosting, or photography services.
  • Technical Usage Data: Standard server logs, IP addresses (anonymised where applicable), browser types, operating systems, and page visit metrics.

2. How We Use Your Information

We process personal data strictly under legitimate and lawful bases:

  • To respond to your enquiries and provide customized quotations for web design, hosting, SEO, or photography services.
  • To perform contractual obligations, including registering domain names in your name, configuring hosting servers, building bespoke websites, and conducting photography shoots.
  • To issue invoices and maintain required statutory accounting records under UK tax legislation.
  • To maintain server security, prevent malicious activities, and optimize performance.

3. Data Retention & Security

We retain your personal data only as long as necessary for the fulfillment of the services requested or to satisfy legal, tax, and accounting requirements. We implement robust technical and organisational security measures, including modern encryption (HTTPS/TLS) and secure server environments, to protect your data against unauthorised access, alteration, or disclosure.

4. Third-Party Sharing

We do not sell, rent, or trade your personal information to third parties. We share information only with trusted infrastructure providers essential to service delivery (e.g., official domain registrars like Nominet for .uk/.wales domains and secure UK cloud hosting data centers).

5. Your Rights Under UK GDPR

You have statutory rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure: You can request deletion of your personal data where retention is no longer legally required.
  • Right to Restriction / Objection: You can object to or restrict processing of your information in specific circumstances.

6. Contact Us Regarding Privacy

If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact our Data Controller:

Derek Phillips — Kestrel Web Solutions
Haverfordwest, Pembrokeshire, Wales, UK
Email: enquiry@kestrelwebsolutions.co.uk
Tel: 07796542785