Privacy Policy
At The Social Bay we value your privacy and are committed to safeguarding your personal data. This policy sets out how we collect, use, store and share your information when you visit our website or work with us.
1. Who we are
The Social Bay Ltd (“we”, “our”, “us”) is a web design agency registered in the United Kingdom.
- Company name: The Social Bay Ltd
- Company number: 16149020
- Address: Campfield, Lower Byrom St, Manchester M3 4FP, United Kingdom
- Contact: lily@thesocialbay.co.uk or daniel@thesocialbay.co.uk
If you have any questions about this policy or how we process your data, contact us at either address above.
2. Information we collect
We may collect and process the following personal data:
- Contact information — name, email address, phone number and business address.
- Project details — information about your web design requirements, branding and content.
- Payment information — billing details and payment card information, processed securely by third-party providers.
- Website usage data — information about your interaction with our website, such as IP address and browser type.
- Contractual data — details necessary to fulfil our agreements, such as project timelines and deliverables.
3. Legal basis for processing
Under the UK GDPR we process your personal data on the following grounds:
- Performance of a contract — to provide the services set out in our agreement.
- Legitimate interests — to improve our services and communicate effectively with clients.
- Consent — for marketing communications, where you have opted in. You can withdraw consent at any time.
- Legal obligation — to comply with financial, tax and other legal requirements.
4. How we use your information
We use your data to deliver our services and meet our obligations:
- To deliver our web design services and meet contractual obligations.
- To communicate project updates and gather feedback.
- To maintain accurate records for financial reporting and compliance.
- To resolve disputes or enforce contractual rights.
- To send updates about our services or relevant promotions, where you have opted in.
5. Sharing your data
We do not sell your personal data. We share it only with trusted third parties where necessary:
- Payment processors — to facilitate secure transactions.
- Subcontractors and freelancers — who assist with specific project deliverables, bound by confidentiality agreements.
- Legal or regulatory authorities — when required by law or to enforce our legal rights.
6. Data security
We use encryption for sensitive data in transit and at rest, access controls that limit data to authorised personnel, and regular security reviews to identify and mitigate vulnerabilities. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities within 72 hours, as required by law.
7. Data retention
We retain personal data only as long as necessary. Service data is kept for up to six years after project completion, for legal and financial obligations. Marketing data is kept until you withdraw consent. Once data is no longer required we securely delete or anonymise it.
8. Your rights under UK GDPR
As a data subject you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccuracies or incomplete data.
- Erasure — request deletion of your data, subject to legal obligations.
- Restriction — limit how we process your data.
- Objection — object to processing for specific purposes, such as marketing.
- Data portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, email lily@thesocialbay.co.uk or daniel@thesocialbay.co.uk.
9. Jurisdiction and dispute resolution
This policy is governed by UK law. Any disputes arising under it are subject to the exclusive jurisdiction of the courts of England and Wales.
10. Updates to this policy
We may revise this policy to reflect changes in our practices or legal obligations. The most recent version will always be available on this page. By using our website or services you confirm that you have read and understood it.