Privacy Policy
Last updated: 8 October 2026
This policy explains what personal data Roundhouse Web ("we", "us", "our") collects, why, who handles it for us, how long we keep it and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).
Who we are
Roundhouse Web is a sole trader, Ryan Anstey trading as Roundhouse Web, and is the data controller for the data described here. You can contact us at [email protected] or on 07919 915450.
What we collect and why
Contact form enquiries. If you use the form on our home page, we collect your name, business name, email, phone number (optional), current website (optional) and your message. We use it to reply to you. Our lawful basis is taking steps at your request before entering a contract, and our legitimate interest in answering enquiries.
"Make this site live" signups. If you sign up, we collect your business name, your name, email, phone number and any changes you ask for. We use it to set up and run your service. Our lawful basis is performance of a contract.
Business outreach. We research limited companies using publicly available business information: the company name, its Companies House record, its business website, public listings and public reviews. We may email the business once with a preview website we have built for it, and up to two follow-ups. Our lawful basis is legitimate interests, namely offering a relevant service to a business. Every email includes a way to opt out. If you opt out we never contact you again, and we keep a minimal suppression record of the email address so that we do not.
Preview websites. A preview website is built only from public business information. It is not indexed by search engines, and it is removed after 30 days unless you become a client.
Our contact form uses a hidden field and a timing check to filter out spam. This website does not use advertising trackers, analytics scripts or tracking cookies.
Who handles your data for us
We use the following processors: Airtable (our customer records), Cloudflare (website hosting and the forms on this site), Google (email, and Google Calendar if you book a call), GoCardless (Direct Debit payments, once you sign up) and Anthropic (we use Claude, its AI service, to research businesses from public information and to draft website copy and emails). They handle data only on our behalf and under their own data protection terms. We do not sell or rent your data.
How long we keep it
- Enquiries and leads: while there is a reasonable prospect of doing business, and for no more than 24 months
- Clients: for the life of the contract plus 6 years, to meet UK tax record-keeping requirements
- Opt-out (suppression) records: indefinitely, so that we can honour your opt-out
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted, where there is no overriding reason for us to keep it
- Object to our use of your data, including to outreach emails at any time
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk
To use any of these rights, email [email protected].
Changes to this policy
If we change this policy, the "last updated" date above will show it.