Privacy policy.

1. Who we are

2four Limited ("2four", "we", "us", "our") is a web design company registered in England and Wales. Our registered address is in Brighton, East Sussex.

2four is the data controller for personal data collected through this website (https://2four.co.uk) and through direct business communication with us.

You can contact us about data protection matters at: hello@2four.co.uk or by calling 01273 639 019.

2. Data we collect

We may collect and process the following categories of personal data:

• Contact information — name, email address, telephone number, company name, when you submit an enquiry or contact us directly.
• Communication data — the content of messages or enquiries you send us, and our replies.
• Usage data — information about how you use this website, including pages visited, time spent on pages, referring URLs, and browser and device type. This is collected in aggregated, anonymised form via analytics tools.
• Cookie data — small data files stored on your device. See section 7 for full details.
• Technical data — your IP address, browser type, operating system, and similar information collected automatically when you visit the site.

3. How we use your data

We use your personal data for the following purposes:

• To respond to enquiries and provide information about our services.
• To deliver contracted web design, development and support services.
• To communicate with existing clients about projects, invoices and ongoing work.
• To understand how this website is used and improve its performance and content.
• To meet our legal and regulatory obligations.
• To protect against fraud and misuse of our services.

4. Legal basis for processing

We process your personal data under the following legal bases as defined in UK GDPR:

• Contract — where processing is necessary to fulfil a contract with you or to take pre-contractual steps at your request (for example, responding to a project enquiry).
• Legitimate interests — where we have a legitimate business interest in processing your data that is not overridden by your rights (for example, understanding how our website performs).
• Consent — where you have given clear consent, for example by accepting analytics cookies. You may withdraw consent at any time.
• Legal obligation — where we are required to retain records for tax, accounting or other regulatory purposes.

5. How long we keep your data

We only retain personal data for as long as necessary for the purpose it was collected:

• Enquiries that do not result in a project — up to 12 months from last contact.
• Client project data — for the duration of the project and up to 6 years thereafter for legal and accounting purposes.
• Invoice and financial records — 6 years in accordance with HMRC requirements.
• Website analytics data — typically retained in aggregated, anonymised form for up to 26 months.

6. Third parties and data sharing

We do not sell, rent or trade your personal data. We may share data with trusted third parties only where necessary:

• Hosting and infrastructure providers — to store and serve this website securely.
• Analytics providers — to understand aggregated website usage patterns. Data is anonymised where possible.
• Accountants and legal advisors — where required for legitimate business operations.
• Law enforcement or regulators — where we are legally required to disclose information.

Any third parties we work with are contractually required to handle your data in accordance with applicable data protection law.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your data where there is no compelling reason for us to continue holding it.
• Right to restriction — to request that we limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@2four.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

This website uses cookies — small text files placed on your device — to support basic functionality and, where you consent, to help us understand how the site is used.

9. External links

This website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies independently.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will indicate when it was last updated. We recommend checking this page periodically.

11. Contact us

For any questions, requests or complaints about how we handle your personal data, please contact us:

• Email: hello@2four.co.uk
• Telephone: 01273 639 019
• Address: 2four Limited, Brighton, East Sussex

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.