1. Who this policy covers
This policy covers visitors, prospective clients, clients, suppliers and relevant contacts whose personal data is processed by Powered By More. It applies to website design and development, applications, digital products, ecommerce work, enquiries, payments and authorised website security and resilience reviews.
2. Information we collect
- identity and contact details, including name, business, role, email, telephone number and correspondence address;
- enquiry, proposal, scope, contract, complaint and correspondence records;
- project material, website content, instructions, approvals and authorised user details;
- technical and access information needed to perform agreed work, handled through an agreed secure method;
- payment, invoice and transaction references, although full card details are processed by Stripe and are not received by us;
- the homepage address and any diagnostic results you choose to include in a review request;
- information about the website, system or customer journey submitted for an authorised security review;
- basic server and security logs generated when the website is accessed; and
- records required for tax, accounting, fraud prevention and legal compliance.
The enquiry form and the human-review links on this website prepare an email in your own email application. They do not submit their contents to our website server. Your enquiry information is transmitted only when you send the email. The website check prepares links in your browser. Selecting the Google PageSpeed link sends your homepage address to Google, which runs the test on its own website. We do not automatically receive or store the results.
3. Why we use information
Contract and pre-contract steps
To respond to enquiries, assess requirements, prepare scopes and quotations, take payment, deliver work, provide support and manage the client relationship.
Legal obligations
To keep tax and accounting records, respond to lawful requests, prevent financial crime and comply with data protection, consumer and other applicable laws.
Legitimate interests
To operate and secure the business, maintain records, improve services, establish or defend legal claims, manage suppliers and prevent misuse. We consider the impact on individuals before relying on legitimate interests.
Consent
Where consent is legally required, including optional electronic marketing or non-essential cookies. You may withdraw consent at any time.
4. Sharing and processors
Information may be shared only where necessary with:
- Google PageSpeed Insights when you choose to open its technical check; Google receives the homepage address in the link and handles its own test under its privacy policy;
- Stripe for secure checkout, payment processing, fraud prevention and transaction records;
- website hosting, domain, email, cloud storage and communications providers;
- approved technical contractors who need limited access for an agreed project and are subject to confidentiality and data protection obligations;
- accountants, insurers, legal advisers and other professional advisers;
- regulators, courts, law enforcement and public authorities where disclosure is lawful or required; and
- a purchaser or successor if the business or relevant assets are reorganised or sold, subject to appropriate safeguards.
We do not sell personal data.
5. International processing
Some service providers may process information outside the United Kingdom. Where required, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with appropriate technical and contractual safeguards.
6. Retention
- unsuccessful or inactive enquiries: normally up to 12 months after the last meaningful contact;
- project, contract, payment and complaint records: normally up to 7 years after the project ends;
- technical credentials: only for as long as required for the agreed work, then returned, revoked or securely deleted where practicable;
- security review working material: for the period stated in the scope or, if none is stated, normally up to 12 months after delivery; and
- server and security logs: for the period reasonably required for security, fault investigation and abuse prevention.
Information may be retained for longer where required by law, an insurer, a regulator, a dispute or a legal hold.
7. Security
We use proportionate access controls, account protection, secure payment processing, limited disclosure and operational safeguards. No internet service is completely secure. Clients must not send passwords, secret keys or highly sensitive data through the public enquiry form or ordinary email. We will agree a safer transfer method where access is required.
8. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict personal data, object to processing, obtain portable data, withdraw consent and complain about automated decision making. These rights are subject to legal conditions and exemptions.
Send a request to hello@poweredbymore.co.uk. We may need proportionate information to verify identity. You may complain to the Information Commissioner’s Office at ico.org.uk, although we ask that you contact us first so we can try to resolve the concern.
9. Cookies and external links
Our use of cookies and similar technologies is explained in the Cookie Policy. A link to another site, including Stripe checkout, takes you to a service controlled by that provider. Its own privacy information applies to its processing.
10. Changes
We will update this policy when our processing or legal obligations materially change. The effective date above identifies the current version.