Privacy Policy

Last updated: 1 September 2026

This privacy policy explains how BUZZBYTES DESIGN & MARKETING LTD ("BuzzBytes", "we", "us") collects, uses and protects your personal data when you visit our website at buzzbytes.co.uk or use our services. We are committed to protecting your privacy and handling your data transparently.

BUZZBYTES DESIGN & MARKETING LTD, company number 15965308, whose registered office is Office 8339, 321–323 High Road, Romford, England, RM6 6AX, is the controller responsible for the personal data described in this policy.

Data we collect

We collect personal data through the following forms and features on this website. Each is listed with the specific data fields, where they are stored, and the processor involved.

Contact and enquiry forms

When you submit an enquiry or book a discovery call, we collect: name, business name, email address, phone number, website URL, sector, what you need help with, budget range and your message. This data is stored in the Enquiry record on the Base44 platform and is used to respond to your enquiry. A notification email is sent to darren@buzzbytes.co.uk via Resend, and a confirmation copy is sent to your email address via the Base44 platform's email integration.

Happy Jack partnership enquiry

When you submit the Happy Jack website offer form, we collect: name, email, phone, photography specialism, Instagram URL, existing website URL, whether you own a domain, and details about your photography. This data is stored in the Enquiry record (with enquiry type "happyjack") on the Base44 platform. A notification email is sent to darren@buzzbytes.co.uk via Resend, and a confirmation email is sent to you via Resend.

Newsletter signup

When you subscribe to our newsletter from the website footer, we collect your email address. This is stored in the NewsletterSubscriber record on the Base44 platform. No other personal data is collected at signup.

AI Website Planner

When you use the AI Website Planner, the answers you provide (website status, main goal, biggest problem, budget range) are processed to generate a personalised recommendation. Planner responses are processed through Base44's AI service and the service providers or subprocessors it uses to provide that functionality. Your answers and the generated plan are stored in your browser's local storage only if you have granted functional/personalisation consent. If you submit the resulting plan as an enquiry, the submitted information is stored as an enquiry on the Base44 platform.

Account registration and authentication

When you create an account for the Academy or other protected areas, we collect your email address and password. Authentication credentials are managed by Base44's authentication service. If you register via Google OAuth, we receive your Google profile name and email. Your account information is stored in the User record on the Base44 platform.

Academy enrolment and progress

When you enrol in an Academy course, we track which lessons you have completed and your progress through the course. This is stored in the AcademyEnrollment record on the Base44 platform, linked to your user account.

Research community signup

When you join our research community after completing a survey, we collect your email address and your consent preferences (whether you want future research reports, future survey invitations and marketing updates). This is stored in the ResearchCommunityrecord on the Base44 platform. Your email is never linked to your survey responses.

Survey responses

Our public surveys are designed so that BuzzBytes does not request direct identifiers within the survey response record. No name or email address is collected as part of the survey answers. Each response is linked to a randomly generated identifier that does not directly identify you. Survey answers, along with role, number of homes, number of employees and region, are stored in the SurveyResponse record on the Base44 platform. Platform-level hosting and security logs may exist independently of the survey response record. Survey progress is saved in your browser's local storage only if you have granted functional/personalisation consent, and only after you actively start a survey.

Google Analytics

If you grant analytics consent, Google Analytics collects usage data that may include pseudonymous identifiers, page views, session information, approximate location, device information and referral source. BuzzBytes does not intentionally send names, email addresses, telephone numbers or form contents to Google Analytics. The Google Analytics script only loads after you grant analytics consent. No analytics data is collected before consent. GA4 is configured with send_page_view: false and page views are sent explicitly on route changes, only while analytics consent is granted. For information about how Google uses data when you use this website, see How Google uses information from sites or apps that use its services. See our Cookie Policy for details.

How we use your data

We use your personal data for the following purposes:

  • To respond to your enquiries and provide information about our services.
  • To send you our newsletter if you have subscribed (you can unsubscribe at any time).
  • To generate personalised website and marketing recommendations through our AI tools.
  • To provide and administer your Academy account and track your course progress.
  • To conduct and publish research into industry trends.
  • To send research reports and future survey invitations to research community members.
  • To improve our website, services and content based on aggregated analytics data.
  • To comply with our legal and regulatory obligations.

Automated decision-making

BuzzBytes does not use personal data to make solely automated decisions that produce legal or similarly significant effects. AI Website Planner outputs are advisory recommendations and are not used to make eligibility, contractual or other significant decisions about individuals.

Legal basis for processing

We process your personal data under the following lawful bases under the UK GDPR:

  • Consent: newsletter signup, analytics cookies, functional and personalisation storage, including selected sector, AI Planner drafts and results, survey progress, and research community signup. You can withdraw your consent at any time.
  • Contract: account registration, authentication, and Academy enrolment, where processing is necessary to provide the service you requested.
  • Legitimate interests: responding to enquiries, including Happy Jack partnership enquiries, and operating the AI Website Planner to produce the recommendation requested by the user where no optional browser storage takes place. These activities support the legitimate interests of operating our business and responding to requested services.

Survey responses do not contain direct identifiers requested by BuzzBytes. We process them under legitimate interests for research purposes. Platform-level hosting and security logs may exist independently of the survey response record.

Data sharing

We do not sell your personal data. We share data with the following service providers.

  • Base44 (base44.com): Our website hosting, application platform, authentication provider and AI service. Stores enquiry data, account information, Academy progress, newsletter subscriptions, research community memberships and survey responses.
  • Google (google.com): Provides Google Analytics (only after you consent to analytics cookies) and Google OAuth for account registration if you choose to sign up with Google. The AI Website Planner uses Base44's AI service, not Google's AI services.
  • Resend (resend.com): Our email delivery provider for notification emails sent to darren@buzzbytes.co.uk and confirmation emails sent to Happy Jack enquiry submitters.

We may also disclose your data if required to do so by law, or to protect our rights, property or safety.

International transfers

Some of our service providers may process personal data outside the United Kingdom. Where this constitutes a restricted transfer under UK data-protection law, the transfer must be covered by an applicable adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum. You may contact us for more information about safeguards relevant to your personal data.

Data retention

The following retention periods apply to the personal data we process:

General BuzzBytes enquiries

  • Enquiries that do not become clients: retained for 24 months after the last meaningful contact.
  • If the enquirer becomes a client: relevant contract, project, payment and transaction records are retained for six years after the client relationship or final transaction ends.

Happy Jack enquiries

  • Enquiries that do not progress: retained for 24 months after the last meaningful contact.
  • If the enquiry becomes a contracted client project, the six-year client-record period applies.

Newsletter

  • Active subscriber details are kept until you unsubscribe or withdraw consent.
  • After unsubscribe, the active subscriber record is removed.
  • A minimum email-address suppression record is retained for as long as BuzzBytes continues sending marketing emails, so the opt-out can be respected. This suppression record is not used for marketing or profiling.

Accounts and Academy

  • Account and Academy progress records are kept while the account remains active.
  • Following an account-closure request, account and Academy progress data is deleted or anonymised within 90 days, except records required for legal, security, accounting or dispute purposes.
  • Accounts are reviewed after 24 months of inactivity.
  • Where contact remains possible, the user is notified before an inactive account is deleted.
  • This is a manual retention-review process, not an automated deletion system.

AI Website Planner

  • Local planner drafts remain only until the earliest of: the user clears them, functional consent is withdrawn, consent expires, the consent version changes, or six months after storage.
  • Submitted planner enquiries follow the general enquiry or client-record retention periods.

Research community

  • The active record is kept until consent is withdrawn.
  • The active record is deleted within 30 days of withdrawal.
  • A minimal suppression record is retained where necessary to respect an email-marketing opt-out.

Survey responses

  • BuzzBytes does not request direct identifiers inside the survey response record.
  • Survey responses are not described as completely anonymous because platform security and hosting logs may exist.
  • Raw survey-response records are retained for five years.
  • After five years, useful statistical information is aggregated or anonymised and the raw response records are deleted.

Google Analytics

  • Google Analytics operates only after analytics consent is granted.
  • GA4 user and event data is retained for up to 14 months.
  • Standard aggregated reporting may remain available without retaining the underlying user-level and event-level data for longer.

Cookie preferences

  • Consent preferences are retained for six months.
  • A fresh choice is requested sooner if categories, purposes, providers or technologies materially change.

Personalisation data (local storage)

  • Stored only with functional/personalisation consent.
  • Includes survey progress, selected sector and saved AI Planner results.
  • Removed when consent is withdrawn, expires, or the consent version changes.
  • Can also be cleared at any time using the "Reset Personalisation" link in the website footer.

You may ask us to delete your personal data. The right to erasure is not absolute, and we may need to retain certain information where required by law or for accounting, security, dispute-resolution or other legitimate purposes. To make a request, contact us at darren@buzzbytes.co.uk.

Your rights

Your data-protection rights are not all absolute. Whether a particular right applies may depend on the circumstances and the lawful basis on which we process the information.

Under the UK GDPR, you have the following rights:

  • The right to be informed about how we use your data.
  • The right of access to your personal data.
  • The right to rectification of inaccurate data.
  • The right to erasure of your personal data.
  • The right to restrict or object to processing.
  • The right to data portability.
  • The right to withdraw consent at any time.

Right to object

You have the right to object to processing based on our legitimate interests. You have an absolute right to object to the use of your personal data for direct marketing. To object, contact darren@buzzbytes.co.uk.

Complaints

If you are concerned about how we use your personal data, please contact us first so we can investigate. You also have the right to complain to the Information Commissioner's Office, the UK data-protection regulator. Information about making a complaint is available at https://ico.org.uk/make-a-complaint/ or by calling 0303 123 1113.

Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS) and access controls limited to authorised personnel. Authentication credentials are managed by Base44's authentication service.

Privacy contact

If you have any questions about this privacy policy or how we handle your data, please contact our privacy contact at darren@buzzbytes.co.uk.

This policy will be reviewed and updated as necessary. Please check this page periodically for any changes.

Back to home