Privacy Policy
This policy explains what happens to the information you share with Sites by Lilly when you get in touch or work with me on a website. I keep it short, plain and honest.
Who I am
Sites by Lilly is a small independent web design studio run by Lilly, based in the United Kingdom. I am the data controller for any personal information you share with me through this website. You can reach me at any time at sitesbylilly@gmail.com.
Information I collect
I only collect the information you choose to give me. When you complete the enquiry form, that includes your name, your business name, your email address, your Instagram handle or existing website address if you add one, your industry, the package you are interested in, your budget range and the details of your message.
If you email me or message me on Instagram instead, I hold whatever contact details and project information appear in that conversation. I do not collect payment card details through this website, and I do not use advertising or tracking cookies to build a profile of visitors.
Why I use it and the legal basis
Your details are used to reply to your enquiry, to prepare a quote, to discuss and deliver your website project, and to keep a record of the work agreed. The legal basis is either my legitimate interest in responding to a business enquiry, or the performance of a contract once you decide to go ahead with a project.
I will not add you to a marketing mailing list unless you have asked me to, and I never sell, rent or trade your information.
Who else can see it
Enquiries submitted through this site are stored in a secure hosted database provided by my website platform, and email correspondence sits with my email provider. These providers process the data on my behalf under their own security and data protection obligations.
During a project I may need to share limited details with services you have asked for, such as a domain registrar, hosting provider or booking platform. I will always tell you before that happens. I may also disclose information if I am legally required to.
How long I keep it
Enquiries that do not turn into a project are deleted within 12 months. If we work together, I keep project and correspondence records for up to six years after the final invoice, which is the period recommended for UK business and tax records.
Your rights
Under UK data protection law you can ask me for a copy of the personal information I hold about you, ask me to correct anything inaccurate, ask me to delete it, or object to how I am using it. Just email me and I will respond within one month.
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This website uses only the essential cookies and local storage needed for the site to work and for the enquiry form to be submitted securely. There is no third-party advertising or profiling.
Changes to this policy
If this policy changes, the updated version will be published on this page. This version was last updated in August 2026.
Contact
For anything relating to your information, email sitesbylilly@gmail.com.