1. Introduction
Evolved Sites ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
- Name and contact information (email address, phone number)
- Company information and website details
- Project requirements and preferences
- Payment information (processed securely through third-party providers)
- Communication preferences
2.2 Information We Collect Automatically
When you visit our website, we may automatically collect:
- IP address and browser information
- Device information and operating system
- Pages visited and time spent on our site
- Referral source and website usage patterns
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the information we collect to:
- Provide and improve our web development services
- Communicate with you about your projects and our services
- Process payments and manage billing
- Send you marketing communications (with your consent)
- Analyze website usage and improve user experience
- Comply with legal obligations
- Protect against fraud and unauthorized access
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on:
- Contract: To fulfill our contractual obligations for web development services
- Legitimate Interest: To improve our services and communicate about our business
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with legal and regulatory requirements
5. Information Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party providers who help us deliver our services (hosting, payment processing, email services)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:
- SSL encryption for data transmission
- Secure hosting and data storage
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Typically:
- Client project data: 7 years after project completion
- Marketing communications: Until you unsubscribe
- Website analytics: 26 months
- Financial records: 7 years as required by UK law
8. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Rectification: Correct any inaccurate personal data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we process your personal data
- Portability: Receive your personal data in a structured format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for processing at any time
To exercise these rights, contact us at privacy@evolvedsites.com. We will respond within 30 days.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website traffic and user behavior
- Improve website functionality and user experience
- Provide relevant marketing content
You can control cookies through your browser settings. See our Cookie Policy for more details.
10. Third-Party Services
We use the following third-party services that may collect your data:
- Google Analytics: Website analytics and performance monitoring
- Email Service Providers: For sending communications and newsletters
- Payment Processors: Secure payment processing (Stripe, PayPal)
- Hosting Providers: Website and data hosting services
These services have their own privacy policies governing their use of your information.
11. International Data Transfers
Your personal data may be transferred to and processed in countries outside the UK/EU. We ensure appropriate safeguards are in place, including:
- Adequacy decisions by the UK/EU authorities
- Standard contractual clauses
- Certification schemes and codes of conduct
12. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.
13. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
14. Contact Information
If you have questions about this privacy policy or our data practices, contact us:
15. Supervisory Authority
If you believe we have not addressed your concerns, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.