Privacy Policy

Last updated: June 2026

Who we are

Whitfield Enterprises Limited trades as Whitfield IT (whitfield.it). We are a web design, SEO, paid advertising, AI automation and analytics studio based near Chester, working with businesses across North Wales, the North West and the rest of the UK.

Company registration number: 08832399. We are the data controller for the personal data described on this page.

You can contact us about anything here at hello@whitfield.it or on 01244 565 666.

What we collect, and where it comes from

When you get in touch with us. If you fill in an enquiry, contact or intake form, run the free website audit, buy a service through our website, or email or call us, we collect what you give us: your name, email address, phone number, business name, website address, and whatever you tell us about what you need.

When you become a client. We hold the details needed to do the work and run the account: contact details, the services agreed, quotes, contracts, invoices and payment records, project notes, support tickets, messages sent through your client portal, and any files or logins you choose to share with us there.

When we research a business before contacting it. We contact limited companies we believe could benefit from a better website or from being found online. To decide who to contact, we look at information the business has already made public: its website, its Companies House record, its listings on social networks and directories, and how it appears in search results. We do not buy marketing lists.

When you visit our website. Standard technical information: pages viewed, the device and browser used, approximate location from your IP address, and how you arrived. See Cookies below.

Why we use it, and the legal basis

To answer you and provide what you asked for, including running a free audit or sending a report. Basis: performing a contract, or the steps you asked us to take before one.
To run our business relationship with you as a client: the work, the portal, invoicing, support. Basis: contract, and our legal obligations for accounting records.
To contact businesses about our services. We send a small number of individually researched emails to limited companies, and we may telephone businesses. Basis: legitimate interests, as permitted for corporate subscribers under the Privacy and Electronic Communications Regulations. Every email carries an unsubscribe link, we screen telephone numbers against the Telephone Preference Service and the Corporate TPS before calling, and any request to stop is honoured immediately and permanently. We do not send marketing to sole traders or individuals without consent.
To understand and improve our website. Basis: legitimate interests, using analytics data that does not identify you.
To meet legal obligations, for example keeping financial records. Basis: legal obligation.

We never sell personal data. We do not share it with anyone for their own marketing.

Who else sees it

We use a small number of providers to run the business, each acting on our instructions under their own data processing terms:

Google Workspace for email, and Google Analytics and Search Console for website and search data.
Stripe for card payments and Direct Debit. We never see or store your card details.
Brevo for delivering transactional emails such as receipts and portal notices.
Twilio for our business telephone line. Calls are logged (who, when, how long); they are not recorded.
Our web host in the United Kingdom, where our systems and your client portal run.
Companies House and DataForSEO as sources of public business and search data used in research.

Some of these providers process data outside the UK. Where they do, transfers are covered by the UK’s international data transfer agreement or an adequacy decision.

Your client portal

Clients get a login to a portal at whitfield.it/portal. It holds your projects, invoices, documents, messages and support tickets. If you choose to share a password with us through the portal’s vault, it is stored encrypted, only Alex can retrieve it, and every time it is used you can see the date and whether it was copied or viewed. Remove anything you have shared whenever you like.

How long we keep it

Enquiries that do not become work: up to 3 years, so we can pick up where we left off if you come back.
Research on businesses we have not contacted or who have not replied: reviewed regularly and removed when it is no longer relevant.
Client records, contracts, invoices and payment records: 7 years after the relationship ends, as required for accounting and tax.
Do-not-contact requests: kept permanently, because that is the only way to honour them.

Your rights

Under UK GDPR you can ask us to: tell you what personal data we hold about you and give you a copy; correct anything wrong; delete it, where we have no legal reason to keep it; restrict or object to how we use it, including objecting to marketing at any time; and give you your data in a portable form. Where we rely on consent you can withdraw it at any time.

Email hello@whitfield.it and we will respond within 30 days. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Our website sets the cookies it needs to work, such as remembering a form you started. We use Google Analytics to understand how the site is used; it is configured so that IP addresses are not stored and reports are aggregated. If we run advertising campaigns, the advertising platform may set a cookie to measure whether an advert led to an enquiry. You can block or delete cookies in your browser settings at any time; the site will still work.

Security

Everything between your browser and our systems is encrypted. Access to client data is limited to the people who need it to do the work, protected by individual logins. Passwords shared with us are encrypted at rest. Backups are taken daily and kept off the server.

Changes

When this policy changes, the date at the top of the page changes with it. Material changes that affect clients are also mentioned in the portal.