Last updated: June 2026
1. Who We Are
AllTimeFave Digital (operated by Greg Lyttleton) is the data controller for personal information collected through this website and in the course of providing our services.
Contact: hello@alltimefave.co.uk | +44 7396 940 858
This policy applies to information collected via our website, contact form, WhatsApp, email, and telephone.
2. What Data We Collect
We collect the following types of personal information:
- Contact information: your name, email address, phone number, and business details when you contact us or fill in our intake form
- Communication data: messages sent via WhatsApp, email, or our contact form
- Business information: business name, address, services, photos, and other content you provide us to build your website or Google Business Profile
- Payment information: billing details processed securely through our payment provider — we do not store card details
We do not use cookies for tracking or advertising. Our website does not use Google Analytics or any third-party tracking scripts.
3. How We Use Your Data
We use your information to:
- Respond to your enquiries and provide our services
- Build and manage your website and Google Business Profile
- Process payments and send invoices
- Communicate with you about your project
- Meet our legal and contractual obligations
We will only contact you about your project or our services. We do not send marketing emails without your consent.
4. Legal Basis for Processing
We process your data under the following lawful bases (UK GDPR):
- Contract: processing necessary to deliver the services you have paid for
- Legitimate interests: responding to enquiries and communicating with prospective clients
- Legal obligation: retaining financial records as required by HMRC
5. Who We Share Data With
We do not sell your data. We may share limited information with trusted third parties only where necessary to deliver our services:
- Netlify — website hosting (your site files are stored on their platform)
- Google — for setting up and verifying your Google Business Profile
- Domain registrars — if we register a domain on your behalf
- Payment processors — for processing setup and hosting fees
All third parties are required to handle your data in accordance with applicable data protection law.
6. How Long We Keep Your Data
- Client records: retained for 6 years after the end of our business relationship (HMRC requirement)
- Enquiries that did not proceed: deleted within 12 months
- Project files and communications: retained for 3 years after project completion
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
AccessRequest a copy of the data we hold about you
RectificationAsk us to correct inaccurate or incomplete data
ErasureRequest deletion of your data where we have no legal basis to retain it
PortabilityReceive your data in a structured, machine-readable format
RestrictionAsk us to limit how we use your data
ObjectionObject to processing based on legitimate interests
To exercise any of these rights, contact us at hello@alltimefave.co.uk. We will respond within 30 days.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.
8. Data Security
We take reasonable steps to protect your personal information. All data is stored securely and access is limited to those who need it to provide our services. Communications are conducted over encrypted channels where possible.
9. Changes to This Policy
We may update this privacy policy from time to time. Any significant changes will be communicated to active clients by email. The current version will always be available on this page.
Data protection questions? Email us at hello@alltimefave.co.uk