Privacy notice

Last updated: 12 November 2026

Who we are

Steadfast Web Studio ("we", "us") designs and builds websites for small businesses in the United Kingdom. We are based in Pakistan. We are responsible for the personal information described in this notice. You can contact us about anything in this notice at [email protected].

What information we hold and where it comes from

• Business prospect information. To find businesses that may want a new website, we use public sources: the Companies House register (company name, number, registered office address, status and incorporation date) and a business's own website or public business listings (website address, published business email address, published phone number and what the website contains). We may also note our own assessment of the website, such as whether it works well on phones.
• Enquiries. If you contact us or fill in our form, we hold your name, business name, email, phone number, town and what you tell us.
• Clients. If you become a client, we also hold the content you give us for your website, our correspondence, and invoice and payment records.

We do not buy contact lists, and we do not knowingly collect information about anyone acting outside their business.

Why we use it and our lawful basis

• Contacting businesses about our services: legitimate interests (offering relevant website services to businesses). We only send unsolicited marketing emails to limited companies and limited liability partnerships, using an email address they publish for their business. We may write to other businesses by post. Every message tells you how to stop further contact.
• Replying to enquiries and preparing previews: steps you ask us to take before entering a contract.
• Providing our services and invoicing: performance of a contract, and legal obligations for financial records.

Stopping contact from us

You can ask us to stop contacting your business at any time by replying "stop" to any email, by using our opt-out page, or by emailing us. We then add your business and email address to a do-not-contact list so that we never contact you again. We keep that short record only for this purpose.

Who we share it with

We do not sell personal information. We use trusted service providers to run our business, who process information on our instructions: Google (spreadsheets and email), Zoho (business email), n8n (workflow automation, hosted in the EU), OpenAI (AI tools that help us research and draft; we only send business information, not special category data), Cloudflare (website hosting and domain), and Payoneer (payment requests and processing). Some of these providers store information outside the UK, for example in the United States, the European Union or Pakistan. Where this happens we rely on the providers' standard data protection terms and safeguards.

How long we keep it

• Prospect information: up to 12 months after we last contacted a business, then deleted, unless the business became a client or asked us not to contact it.
• Enquiries that do not lead to work: up to 12 months.
• Client and invoice records: 6 years after our work ends, for tax and accounting purposes.
• Do-not-contact list: kept for as long as we market our services, so that we respect your request.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct or delete it, object to our use of it (including for marketing, which we will always respect), or ask us to restrict its use. Email [email protected] and we will reply within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

This website does not use advertising or tracking cookies. Our hosting provider may set a strictly necessary security cookie to protect the site from abuse.