Privacy Policy

This Privacy Policy explains how Toolbelt ("we", "us", "our") collects, uses and protects your personal data when you visit toolbelt.uk or get in touch with us. We are the data controller for the information described below, and we handle it in line with the UK GDPR and the Data Protection Act 2018.

The information we collect

We only collect what we need to respond to you and run our business:

• Enquiry details — when you submit our contact form we collect your name, business name, email address, phone number (if you give it), your trade, and anything you write in the notes, along with any design theme or accent colour you selected.
• Communications — any emails or messages you send us, and our replies.
• Technical data — basic information your browser sends automatically, such as your approximate location, device and browser type, used to keep the site secure and working.

We do not collect special category data, and we don't ask for payment details through this website.

How we use your information

• To reply to your enquiry and discuss building your website.
• To provide, maintain and improve our services.
• To keep records of our dealings with you and meet our legal obligations.
• To keep the website secure and prevent abuse.

Our legal bases

Under the UK GDPR we rely on the following legal bases:

• Consent — when you choose to submit the enquiry form.
• Legitimate interests — to respond to you, run and protect our business, provided your rights don't override those interests.
• Legal obligation — where we must keep certain records.

Who we share it with

We don't sell your data. We share it only with trusted service providers who help us run the site, acting on our instructions as data processors:

• Supabase — securely stores enquiry submissions.
• Amazon Web Services (AWS) — hosts and delivers the website.
• Email providers — so we can correspond with you.

We may also disclose information if required by law, or to protect our rights, safety or property.

International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement) to keep your data protected to UK standards.

How long we keep it

We keep enquiry data for as long as needed to deal with your request and for a reasonable period afterwards in case you come back to us — typically up to 24 months — then delete it, unless we need to keep it longer to meet a legal obligation.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Ask us to correct it if it's wrong, or delete it.
• Object to or restrict how we use it.
• Withdraw consent at any time.
• Ask for a copy of your data in a portable format.

To exercise any of these, email us at hello@toolbelt.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We keep cookies to a minimum. This site does not use advertising or third-party tracking cookies. Any cookies we do use are strictly necessary to make the site work. If we add optional analytics in future, we'll ask for your consent first.

Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, but we work hard to safeguard your information.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "last updated" date above. Significant changes will be made clear on this page.

Contact us

Questions about this policy or your data? Email hello@toolbelt.uk and we'll be happy to help.