Privacy Policy

Who we are

TS Design Solutions is a web design and software engineering consultancy based in Basingstoke, Hampshire, United Kingdom. You can reach us about anything in this policy at [email protected] or on +44 7961 603 980.

What we collect and why

The information you give us directly is:

• Contact form — your name, email address, project type and message. We use these to reply to your enquiry and to send you a confirmation that we received it.
• Free website audit — your email address and your answers to the eight audit questions. We use these to email you your report and to follow up about the results.
• Newsletter signup — your email address. We use it to send you the checklist you requested and occasional updates you can opt out of at any time.
• Cookie preferences — your choices from the cookie banner, stored in your browser. See our cookie policy.

Some data is also processed automatically when you visit, without you entering anything:

• Cloudflare, which hosts and protects the site, processes your IP address and standard request data (such as browser type and the page requested) to serve pages, block attacks and apply rate limits. This is ordinary security and delivery logging.
• Google reCAPTCHA, where enabled on our forms, collects device and behavioural signals — such as mouse movement, and cookies it sets itself — to score how likely you are to be a bot. We receive the resulting assessment and act on it; we do not receive the underlying behavioural signals Google uses to produce it.

We do not run advertising trackers, we do not buy or sell personal data, and we do not build marketing profiles on visitors.

Our lawful basis

For enquiries and audit requests we rely on legitimate interests — you contacted us about our services and expect a reply. The same basis covers the security and delivery processing described above: keeping the site available and our forms free of spam. For marketing emails we rely on your consent, given when you submit the signup form. You can withdraw that consent at any time and it will not affect anything we did before you withdrew it.

Who we share it with

We use a small number of processors to run the site. They only process your data on our instructions:

• Resend — delivers the emails sent by our forms. See their privacy policy and data processing agreement.
• Cloudflare — hosts the site and runs the form endpoints, and provides the rate limiting that stops abuse. See their privacy policy and GDPR commitments.
• Google reCAPTCHA — where enabled, distinguishes real visitors from bots on our forms. Google's privacy policy and terms of service apply to that processing.

Some of these providers process data outside the UK. Each sets out the specific safeguard it relies on in its own data processing agreement, linked above — typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it. We will also disclose data where we are legally required to.

How long we keep it

Enquiry and audit correspondence is kept for up to two years from our last contact with you, so we can pick up a conversation where it left off. Newsletter subscriptions are kept until you unsubscribe. Anything we no longer have a reason to hold is deleted.

Your rights

Under UK GDPR you have the following rights. Each applies subject to the conditions and exemptions in the legislation, so they are not absolute in every circumstance:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent to marketing at any time.

Email [email protected] to exercise any of these and we will respond within one month. If a request is complex, or you have made several, we may extend that by up to two further months — we will tell you within the first month if we need to, and why. If you are not happy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Security

The site is served over HTTPS with a strict content security policy. Form submissions are validated and rate limited, and access to the mailboxes that receive them is restricted. No system is perfectly secure, but we take the handling of your data seriously and will notify you and the ICO of any breach that is likely to affect your rights.

Changes to this policy

If we change how we handle personal data we will update this page and revise the date at the top. Material changes affecting existing subscribers will be communicated by email.