Privacy Policy
This policy explains how Rhino Websites Ltd ("Rhino Websites", "we", "us") collects and uses personal data when you visit rhinowebsites.co.uk, get in touch, book a consultation, or use our client area. We are committed to handling your data fairly, securely and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Rhino Websites Ltd is a company registered in England and Wales (company number 16409897). We are the data controller for the personal data described in this policy.
If you have any questions about this policy or your data, contact us atinfo@rhinowebsites.co.uk or on 07753402088.
2. The data we collect
When you contact us
If you use the enquiry form on our contact page, email us, call us or message us on WhatsApp, we collect the details you give us. This is usually your name, email address, phone number, business name and information about your project.
When you book a consultation
Our free consultation bookings use Google Calendar appointment scheduling. When you book, we receive your name, email address, the time you chose and anything you add to the booking.
When you become a client
If you work with us or subscribe to a service, we hold the information needed to deliver and invoice the work. That includes contact and billing details, project information, correspondence and payment records. If you have an account in our client area (clients.rhinowebsites.co.uk), we also hold your account details and order and subscription history.
Payments are processed securely by our payment providers (such as Stripe or PayPal). We never see or store your full card details.
When you browse the website
Our hosting and security provider, Cloudflare, processes technical information such as your IP address, browser type and the pages requested, to deliver the website and protect it from attacks. If you accept analytics cookies, we also use Google Analytics to understand how visitors use the site (see Cookies below).
3. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and arranging consultations | Legitimate interests (replying to people who contact us), or steps taken at your request before entering into a contract |
| Delivering projects, subscriptions and support | Performance of a contract |
| Invoicing, payments and keeping financial records | Performance of a contract and legal obligation |
| Running, securing and improving the website | Legitimate interests |
| Website analytics (Google Analytics) | Consent, which you can withdraw at any time |
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
4. Who we share it with
We only share personal data with trusted providers that help us run the business, and only as far as they need it:
- Cloudflare: website hosting, delivery and security
- Enquiro: the enquiry form on our contact page
- Google: consultation bookings (Google Calendar), email and, with your consent, Google Analytics
- Meta (WhatsApp): if you choose to message us on WhatsApp
- Payment providers (such as Stripe or PayPal): processing payments and subscriptions
- Hosting and email providers for our client area and the emails it sends
- Professional advisers, such as our accountant, where needed
We may also disclose data where we are required to by law.
5. International transfers
Some of these providers, such as Google, Cloudflare and Meta, may process data outside the UK. Where they do, the transfer is protected by appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Extension to the EU–US Data Privacy Framework.
6. How long we keep it
- Enquiries and consultation bookings that don't lead to work: up to 2 years
- Client, project and financial records: 6 years after the end of the financial year they relate to, as required for tax purposes
- Client area accounts: while the account is active, then in line with the financial records above
- Analytics data: up to 14 months
7. Keeping your data secure
We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections, access controls and reputable, secure providers.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate or incomplete data
- Ask us to delete your data
- Ask us to restrict how we use your data
- Object to us using your data based on legitimate interests
- Receive your data in a portable format
- Withdraw your consent at any time, where we rely on consent
To exercise any of these rights, email info@rhinowebsites.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, although we'd appreciate the chance to put things right first.
9. Cookies
Cookies are small files stored on your device. We only use analytics cookies if you accept them in our cookie banner. You can change your choice at any time using , which is also linked in the footer of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
rhino-cookie-consent | Rhino Websites | Remembers your cookie choice (stored in your browser, strictly necessary) | Until cleared, or 12 months |
_ga | Google Analytics | Distinguishes visitors so we can measure site usage (only with consent) | 2 years |
_ga_* | Google Analytics | Keeps track of a browsing session (only with consent) | 2 years |
Some pages include content from other services, which may set their own cookies under their own policies: the enquiry form on our contact page (Enquiro) and the booking calendar on our consultation page (Google). Our client area at clients.rhinowebsites.co.uk uses strictly necessary cookies to keep you logged in and to process orders.
10. Children
Our website and services are aimed at businesses and are not intended for children under 16.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.