1. Who we are
Beacon Web Studio is a small web studio based in Fife, Scotland. We're the data controller for the information you share with us through this site.
You can reach us at hello@beaconwebstudio.uk.
2. What we collect
From the contact form. When you fill in the form on our homepage, you give us:
- Your name
- Your business name
- The kind of business you run
- Your email address
- Any message you choose to add (optional)
When you submit the form, we also automatically record your IP address and your browser's user-agent string. These help us spot spam and abuse; they sit in the same database row as the rest of your submission.
Server logs. Our network provider (Cloudflare) logs every request to the site at the edge — the URL you requested, your IP address, your browser's user-agent, and the time. Cloudflare uses these for security and bot filtering; we see an aggregated view to spot operational issues. We don't join them to anything else we hold about you. Cloudflare's own privacy policy covers these logs (cloudflare.com/privacypolicy).
If you email us. When you contact us directly at hello@beaconwebstudio.uk, that conversation lives in our mailbox on ProtonMail. We keep email threads as long as needed to handle them, then archive or delete.
That's it. We don't track you around the site. We don't use analytics that profile you. We don't set cookies for tracking, analytics, or marketing — see section 10.
3. What we do with it
We use what you send us to:
- Reply to your enquiry — lawful basis: steps prior to entering into a contract at your request, with a fallback of legitimate interest in keeping a conversation going if you don't end up becoming a client.
- Filter spam and abuse — lawful basis: legitimate interest in keeping our inbox usable.
We don't send marketing emails. We don't add you to a newsletter. We don't sell or share your details with anyone for marketing or analytics.
4. Who else sees it
Your submission passes through a couple of processors before it gets to us:
- Cloudflare — provides our network, our serverless platform (Workers), and our database (D1) where the lead is stored. Cloudflare is acting as our processor.
- Discord — we get a notification of new leads in a private Discord channel that only the founder can see, so a reply can go out quickly. The notification contains the same fields as the database row (including your IP). Discord is a US-based service, so the notification is also stored on Discord's infrastructure.
No-one else sees your submission — we don't share it with marketing tools, advertising networks, or third-party CRMs.
5. International transfers
The Discord notification crosses into the United States. We rely on Discord's published transfer safeguards (standard contractual clauses) for that step. If you'd rather your enquiry didn't flow through Discord, email us directly at hello@beaconwebstudio.uk instead of using the form.
6. How long we keep it
- Form submissions — up to 2 years from your last contact with us, unless you become a client (in which case it lives under our client contract instead). After 2 years we delete it.
- Discord notifications — purged within ~90 days.
- Backups — Cloudflare keeps its own operational backups of D1; we don't control retention there.
If you'd like your data deleted sooner, just ask.
7. Your rights
Under UK GDPR you have the right to:
- See what we have about you (access)
- Get it corrected if it's wrong (rectification)
- Have it deleted (erasure)
- Have its use restricted
- Have it sent to you in a portable format (portability)
- Object to us using it under legitimate interests
- Not be subject to decisions made purely by automated processing (we don't do that)
To exercise any of these, email hello@beaconwebstudio.uk. We'll respond within one month.
8. Children's data
This site isn't aimed at children. We don't knowingly collect personal data from anyone under 18. If you're a parent or guardian and think we have data about a child, please email us and we'll delete it.
9. Complaints
If you think we've handled your data badly, please email us first — we'd like the chance to put it right. If you're still not happy, you can complain to the UK Information Commissioner's Office at ico.org.uk.
10. Cookies
This site doesn't set cookies for tracking, analytics, or marketing — there's no cookie banner because there's nothing for you to consent to.
Our network provider (Cloudflare) may set short-lived strictly-necessary cookies for traffic filtering and bot detection (e.g. __cf_bm). These are used to keep the site up and don't identify or track you across other sites. Under UK PECR they don't require consent.
11. Updates
If we change this notice in a way that affects you, we'll update the “Last updated” date at the top. Older versions are in our public git history.
12. Contact
Beacon Web Studio
Based in Fife, Scotland
hello@beaconwebstudio.uk