Privacy policy
Last updated 01/11/2025
Made Roughley Ltd (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, and share information when you use our website www.maderoughley.com.
We act as a Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We may collect and process the following personal data when you interact with our website:
Contact Information: your name, email address, and any details you provide through our contact form.
Communications: information included in your messages to us.
Technical Data: IP address, browser type and version, time zone settings, operating system, and device details.
Usage Data: information about how you use our website, including pages visited and links clicked.
Cookies & Tracking Technologies: if used, these help us understand website performance and improve services (see Section 8: Cookies).
2. How We Use Your Information
We use your personal data to:
Respond to enquiries sent via our contact form or email.
Provide information about our services.
Maintain business records and comply with legal obligations.
Improve our website and monitor usage (if analytics are enabled).
Send marketing communications (only with your consent, which you may withdraw at any time).
3. Legal Basis for Processing
We process your data under the following legal grounds:
Legitimate Interests: responding to enquiries, maintaining business records, running our website, and improving services.
Consent: when you opt in to receive marketing communications or accept non-essential cookies.
Send marketing communications (only with your consent, which you may withdraw at any time).
4. Sharing Your Information
We do not sell or rent your personal data. However, we may share information with:
Service Providers: such as website hosting, email, analytics, or IT support providers.
Current providers include:
Cloud Hosting & VPS Hosting (for our website and client sites).
Mailgun (for secure email delivery).
Professional Advisers: such as accountants, auditors, or legal advisers.
Regulatory Authorities: if required by law.
Some third parties may be located outside the UK/EEA. Where this applies, we use approved safeguards such as Standard Contractual Clauses to protect your data.
5. Data Retention
We only keep personal data for as long as necessary:
Contact form enquiries: up to 12 months unless needed longer for ongoing services or legal obligations.
Marketing data: until you withdraw consent or unsubscribe.
Cookies and analytics data: in line with our cookie policy.
Client website data (Processor role): retained only as instructed by the client under hosting/maintenance agreements.
6. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (subject to legal exceptions).
Restrict or object to processing of your data.
Request transfer of your data to another organisation.
Withdraw consent at any time (for consent-based processing).
To exercise your rights, please contact us (see Section 10).
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.
7. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration, or disclosure.
8. Cookies
We may use cookies to:
Ensure the site functions correctly (essential cookies).
Analyse performance and traffic (analytics cookies, if enabled).
Deliver targeted content or advertising (marketing cookies, if enabled).
To exercise your rights, please contact us (see Section 10).
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.
9. Links to Other Websites
Our website links to social media accounts and may include other external links. We are not responsible for the privacy practices or content of external websites.
10. Contact Us
For any privacy-related questions or to exercise your rights:
Made Roughley Ltd
Email: hello@maderoughley.com
Postal Address: 10 Pennine Close, Risca, Wales, NP11 6QS
Data Protection Contact: Christopher Roughley
Email: hello@maderoughley.com
Postal Address: 10 Pennine Close, Risca, Wales, NP11 6QS
Data Protection Contact: Christopher Roughley
11. Company Information
Company Name: Made Roughley Ltd
Company Number: 16643782
Registered Office: 10 Pennine Close, Risca, NP11 6QS
12. Acting as Data Controller and Data Processor
Controller role: For www.maderoughley.com, we are the Data Controller.
Processor role: For client hosting/maintenance, we act as a Data Processor under written agreements. The client is the Data Controller and responsible for lawful processing. We only process client data on their documented instructions.
When developing or maintaining software solutions, we act as a Data Processor, handling project data strictly under client instructions.
13. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in law or our services. The latest version will always be available on our website and will show the date of the last update.
