1. Who is Responsible for Your Information
Coastal App Works is the data controller responsible for the enquiry information you send.
Contact Email: coastalappworks@gmail.com
Studio Location: Southport, Merseyside, United Kingdom.
2. Information We Collect and How We Use It
When you submit an enquiry, request a quotation, or email our studio, we collect:
-
•
Your name and company or business name
-
•
Your email address and telephone number (if provided)
-
•
Your project specification, preferred tier, budget bracket, and operational requirements
We use this information solely to evaluate your requirements, generate a factual quote, and discuss potential app development work with you.
3. Lawful Basis for Processing
Under UK GDPR (Data Protection Act 2018), our lawful basis for handling enquiry information is:
-
✓
Legitimate Interests: To operate our business by responding to incoming business enquiries and answering customer questions.
-
✓
Steps Towards a Contract: Taking necessary preparatory steps at your request prior to entering into a formal development contract.
We do NOT add you to any automated marketing newsletter, sales pipeline, or spam email list simply because you enquired.
4. Enquiry Retention
Our policy for unsuccessful enquiries is six months after last contact. This requires deletion from our mailbox and any enabled form-service storage; it is not automated by this website. Provider retention can differ as described below:
-
•
Unsuccessful Enquiries: Deleted six (6) months after our last contact, unless we are required to retain information to meet a statutory legal obligation or resolve a dispute.
-
•
Commissioned Projects: If you proceed with development, records, project specifications, and financial transactions are kept under commercial record arrangements explained when work is agreed.
5. Third-Party Infrastructure & Technical Data
We rely on standard, reputable enterprise service providers to deliver our web presence and communicate with clients:
-
•
Web3Forms (when online sending is enabled): Your contact details, project brief, service choices and estimate are sent over HTTPS to Web3Forms for processing and email notification. Its policy permits submission storage for up to three years unless a shorter period applies or records are deleted earlier. Its infrastructure and spam-prevention providers may also process submission and technical data. See the Web3Forms privacy policy and data processing agreement. If the form prepares an email draft instead, you must send it using your own email provider.
-
•
Google / Gmail and Google Fonts: The site loads Inter and Plus Jakarta Sans from Google Fonts; your browser sends Google technical connection information when fetching those fonts. Stores and processes incoming and outgoing enquiry emails. Google processes technical information in accordance with Google's Privacy Policy.
-
•
Cloudflare / Edge Hosting: Delivers high-speed static assets, security firewalls, and TLS encryption. Cloudflare processes standard network telemetry (such as IP addresses and browser user-agents) to operate and secure its hosting services, under its privacy policy.
International processing
Our service providers may process information outside the UK. Web3Forms states that it operates from India and uses international infrastructure, with transfer safeguards described in its data processing agreement. Contact us for information about the providers and safeguards used for your enquiry.
6. Cookies & Tracking Technologies
This website is designed to be privacy-first:
-
✓
Zero Invasive Tracking Cookies: We do not load Google Analytics, Meta tracking pixels, or cross-site advertising trackers on this site.
-
✓
Essential Functional Storage Only: Quotation values remain in the current page memory. This site does not save the brief in browser storage. Closing or reloading the page can discard it; copy the brief before leaving.
Important Security Advice
Please do NOT send passwords, bank login details, private payment credentials, or sensitive customer databases in an initial enquiry. If a project requires credential or database access, we will arrange a secure, encrypted transfer channel after our contract is executed.
8. Your Rights Under UK Data Protection Law
Under the UK Data Protection Act 2018 and UK GDPR, you have the right to:
- •Request access to the personal information we hold about you.
- •Request correction of inaccurate or incomplete information.
- •Request deletion of your enquiry information before the standard 6-month expiry.
- •Object to or request restriction of our processing of your information.
To exercise any of these rights, email us directly at coastalappworks@gmail.com. We will respond promptly within one calendar month.
If you are dissatisfied with how we handle your enquiry data, you have the right to lodge a formal complaint with the UK supervisory authority: Information Commissioner's Office (ICO).
