Privacy,in plain English.
Last updated Effective 6 min read
The short version
Five things
to know.
- We only collect what we need to reply to you, deliver projects and keep this site running.
- We never sell your data or use it to train AI models.
- No analytics or advertising cookies. Only essential cookies that keep the site working.
- Data is held by cloud providers under written agreements; any transfer abroad is covered by safeguards such as standard contractual clauses.
- You can see, correct, export or delete your data at any time — just email us.
Who we are
Performative Web (“we”, “us”) is a remote-first digital services company. We design, build and grow websites, apps and business software for clients worldwide. We are the controller of personal data collected through this website and our sales process.
This policy covers what happens when you visit this site, send us an enquiry, subscribe to our newsletter or apply for a job. When we handle personal data on a client’s behalf while delivering a project, the client is the controller and our Data Processing Addendum applies instead.
What we collect
When you contact us or use this site we may collect:
- Contact details — name, work email, phone, company
- Project information you choose to share in forms, calls or email, such as the services you need and your budget
- Your email address, if you subscribe to our newsletter
- Job applications — your name, email, CV or LinkedIn profile, portfolio links and anything else you send
- Technical data — IP address, browser and device type, recorded in our hosting provider’s security logs
- Billing details if you become a client
Each form submission also records the page it was sent from and the time we received it. We don’t ask for sensitive information such as health data, so please leave it out of forms and messages. This site is not aimed at children and we don’t knowingly collect data from anyone under 16.
How we use your data
We use your information to reply to enquiries, prepare proposals, deliver and support projects, send invoices, and — only if you opt in — send our monthly newsletter. If you apply for a role, we use your application to assess it and arrange interviews.
When you submit the enquiry form, the newsletter form or a job application, our server checks the fields and forwards them to a webhook service that delivers them to our team. We don’t store what you type in your browser.
| Data | Purpose | Kept for |
|---|---|---|
| Enquiry details | Reply and prepare a proposal | 24 months |
| Client contacts | Deliver and support projects | Contract + 6 years |
| Invoices | Accounting and tax | 6 years |
| Newsletter email | Send the monthly newsletter | Until you unsubscribe |
| Job applications | Assess your application | 12 months |
| Security logs | Protect the site from abuse | Up to 30 days |
We don’t use your data for profiling or for automated decisions that have legal or similarly significant effects on you.
Legal bases
We rely on legitimate interests to respond to business enquiries, assess job applications and keep this site secure, contract to deliver services, legal obligation for accounting records, and consent for marketing emails.
Where we rely on consent you can withdraw it at any time, for example by using the unsubscribe link in any newsletter. Withdrawing consent doesn’t affect anything we did before you withdrew it.
International transfers
We are a remote-first team serving clients worldwide, so your data may be accessed by our team, or processed by our providers, in countries other than your own, including the United States.
Where personal data from the UK, EU or EEA goes to a country without an adequacy decision, the transfer is protected by the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or the EU–US Data Privacy Framework where the provider is certified.
How long we keep it
Enquiries that don’t become projects are deleted after 24 months. Client records are kept for six years after our last invoice to meet tax obligations. Newsletter data is kept until you unsubscribe.
Job applications are deleted 12 months after we receive them unless you ask us to delete them sooner, or to keep them on file for future roles. Hosting security logs are kept for up to 30 days.
Keeping it secure
All traffic to this site is encrypted with HTTPS. Access to personal data is limited to the people who need it, protected by multi-factor authentication, and removed when someone leaves the team. If a breach puts your rights at risk, we will tell you and the relevant regulator as the law requires.
Your rights
You can ask to access, correct, export, restrict or delete your personal data, and object to processing based on legitimate interests. We respond within one month.
- Email privacy@performativeweb.com with your request
- We may ask you to verify your identity
- There is no fee for reasonable requests
These rights come from the GDPR, the UK GDPR and, for California residents, the CCPA. Under the CCPA you can also ask what personal information we collect and why, and you won’t be treated differently for using your rights. We don’t sell or share personal information for cross-context behavioural advertising, and we don’t use sensitive personal information. Wherever you live, you can make any of these requests and we will honour them where we can.
Changes to this policy
When we change this policy we update the date at the top of the page. If a change affects how we use data you have already given us, we will tell you by email before it takes effect.
Contact & complaints
Questions about this policy go to our data protection lead at privacy@performativeweb.com. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk), or to the data protection authority where you live or work.
Questions about your data?
Our data protection lead replies within five working days.