Privacy Policy

Last updated: 04/09/2025

Made Roughley Ltd (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, and share information when you use our website www.maderoughley.com.

We act as a Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following personal data when you interact with our website:

• Contact Information: your name, email address, and any details you provide through our contact form.
• Communications: information included in your messages to us.
• Technical Data: IP address, browser type and version, time zone settings, operating system, and device details.
• Usage Data: information about how you use our website, including pages visited and links clicked.
• Cookies & Tracking Technologies: if used, these help us understand website performance and improve services (see Section 8: Cookies).

2. How We Use Your Information

We use your personal data to:

• Respond to enquiries sent via our contact form or email.
• Provide information about our services.
• Maintain business records and comply with legal obligations.
• Improve our website and monitor usage (if analytics are enabled).
• Send marketing communications (only with your consent, which you may withdraw at any time).

3. Legal Basis for Processing

We process your data under the following legal grounds:

• Legitimate Interests: responding to enquiries, maintaining business records, running our website, and improving services.
• Consent: when you opt in to receive marketing communications or accept non-essential cookies.
• Legal Obligation: where required to comply with laws or regulatory requirements.

4. Sharing Your Information

We do not sell or rent your personal data. However, we may share information with:

• Service Providers: such as website hosting, email, analytics, or IT support providers.
  
  • Current providers include:
    
    • Cloud Hosting & VPS Hosting (for our website and client sites).
    • Mailgun (for secure email delivery).
• Professional Advisers: such as accountants, auditors, or legal advisers.
• Regulatory Authorities: if required by law.

Some third parties may be located outside the UK/EEA. Where this applies, we use approved safeguards such as Standard Contractual Clauses to protect your data.

5. Data Retention

We only keep personal data for as long as necessary:

• Contact form enquiries: up to 12 months unless needed longer for ongoing services or legal obligations.
• Marketing data: until you withdraw consent or unsubscribe.
• Cookies and analytics data: in line with our cookie policy.
• Client website data (Processor role): retained only as instructed by the client under hosting/maintenance agreements.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal exceptions).
• Restrict or object to processing of your data.
• Request transfer of your data to another organisation.
• Withdraw consent at any time (for consent-based processing).

To exercise your rights, please contact us (see Section 10).
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.

7. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration, or disclosure.

8. Cookies

We may use cookies to:

• Ensure the site functions correctly (essential cookies).
• Analyse performance and traffic (analytics cookies, if enabled).
• Deliver targeted content or advertising (marketing cookies, if enabled).

By law, non-essential cookies require your consent. You can manage cookies through your browser settings and our cookie banner (if implemented).

9. Links to Other Websites

Our website links to social media accounts and may include other external links. We are not responsible for the privacy practices or content of external websites.

10. Contact Us

For any privacy-related questions or to exercise your rights:

Made Roughley Ltd
Email: hello@maderoughley.com
Postal Address: 10 Pennine Close, Risca, Wales, NP11 6QS

Data Protection Contact: Christopher Roughley

11. Company Information

• Company Name: Made Roughley Ltd
• Company Number: 16643782
• Registered Office: 10 Pennine Close, Risca, NP11 6QS

12. Acting as Data Controller and Data Processor

• Controller role: For www.maderoughley.com, we are the Data Controller.
• Processor role: For client hosting/maintenance, we act as a Data Processor under written agreements. The client is the Data Controller and responsible for lawful processing. We only process client data on their documented instructions.
• When developing or maintaining software solutions, we act as a Data Processor, handling project data strictly under client instructions.

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in law or our services. The latest version will always be available on our website and will show the date of the last update.