Privacy Policy
Last updated: August 2026
This Privacy Policy explains how The Web Creature ("we", "us") collects, uses, and protects information when you visit our website or engage our services.
Information We Collect
We collect information you provide directly, including:
- Contact form submissions (name, email, company, service interest, budget, current website URL, project details)
- Job application details, submitted separately from sales enquiries and never used for marketing measurement
- Communications you send us directly
Where you have given consent (see "Cookies & Consent" below), we also collect analytics data (pages viewed, referring site, approximate location, device/browser type) and advertising data used to measure and improve our Google Ads and Meta (Facebook/Instagram) campaigns.
How We Use Your Information
- To respond to your enquiries and job applications
- To send project communications, proposals, and updates
- To improve our website and services
- Where consented, to measure marketing campaign performance and, on Meta platforms, to help match your enquiry to the ad you clicked so we can report accurately on what's working
- To comply with legal obligations
We do not sell your data. Where we share data with Google or Meta as described below, it is solely to measure and run our own advertising — never to build audiences for anyone else.
Cookies & Consent
When you first visit, a banner lets you choose between three categories:
- Necessary — always on. Session handling and security (e.g. CSRF protection); the site cannot function without these.
- Analytics — only with your consent. Google Analytics (GA4), to understand how the site is used.
- Marketing — only with your consent. Google Ads conversion measurement and the Meta Pixel, used to measure and improve ad performance.
Your choice is stored for up to 180 days and applies immediately — nothing in the Analytics or Marketing categories loads before you accept. You can change your mind at any time via "Cookie preferences" in the footer of every page.
Third-Party Services We Use
Depending on your cookie choices, the following third parties may process limited data on our behalf:
- Google Tag Manager — loads the other Google tools below; only activates them once you've consented.
- Google Analytics (GA4) — usage analytics, only after Analytics consent.
- Google Ads — conversion and campaign measurement, only after Marketing consent.
- Meta Pixel and Meta Conversions API (Facebook/Instagram) — used to measure ad performance, only after Marketing consent. When you submit our contact form having consented to Marketing cookies, we send Meta a one-way cryptographic hash of your email address (not your name, message, or any other field) so Meta can match your enquiry to the ad you clicked — Meta cannot reverse this hash back into your email.
- Trusted providers for SMTP email delivery, cloud hosting, and project management software.
Google and Meta are based in the United States. Where your data is transferred there, it is done under those providers' standard contractual clauses or equivalent safeguards recognised under GDPR.
Legal Basis for Processing (EEA/UK visitors)
- Contract — processing your enquiry or job application in order to respond to it.
- Consent — Analytics and Marketing cookies, and anything derived from them (see "Cookies & Consent" above). You may withdraw consent at any time with no effect on the lawfulness of processing before withdrawal.
- Legitimate interest — keeping the site secure and functioning, and responding to unsolicited enquiries.
Data Retention
We retain client data for the duration of the client relationship and a reasonable period afterward. Non-client enquiry data is retained for up to 12 months. Cookie consent choices are retained for up to 180 days, after which we ask again.
Your Rights
You have the right to access, correct, delete, restrict, or object to the processing of your data, to request data portability, and to withdraw consent at any time (via "Cookie preferences" in the footer, for cookie-based processing). If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. Contact us at info@thewebcreature.com to exercise these rights.
Security
We use HTTPS encryption, secure credential storage, and access controls to protect your data.
Contact Us
Questions about this policy? Reach us at info@thewebcreature.com or via our contact form.