Privacy policy

Last updated 27 October 2026

This policy explains what personal information ItsHandy collects, why we collect it, how we look after it and what your rights are. We keep it short and in plain English. If anything is unclear, email us and we will explain.

Who we are

We are the "controller" for the personal information described here. That means we decide how it is used and we are responsible for it.

What we collect

• When you get in touch: your name, email address, phone number (if you give it) and whatever you write in your message. This comes from our contact form, email, phone calls or messages.
• When you become a client: your business details, billing details and the information we need to build and run your website, tools or advertising.
• When you visit this website: our hosting provider keeps standard technical logs (such as IP address and browser type) to keep the site secure and working. We do not use tracking cookies or advertising trackers on this site.

Why we use it

• To reply to you and give you a quote. We do this because you asked us to.
• To deliver and support the work you have asked for, and to invoice you. We do this to carry out our contract with you.
• To keep business and tax records. The law requires this.
• To keep our website and systems secure. This is in our legitimate interest.

We never sell your information and we do not send marketing emails unless you have asked for them.

Google accounts and advertising data

For clients who ask us to manage their Google advertising or Google Business Profile, we connect to their Google Ads account and Business Profile with their permission. Through this connection we can see advertising results (such as views, clicks, costs and enquiries), campaign settings and business listing details.

• We use this information only to set up, run, check and report on that client's own advertising and listing.
• We do not sell it, share it with other businesses or use it for any other purpose, including our own advertising.
• Only ItsHandy staff working on that client's account can see it, and we store it securely.
• Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
• A client can remove our access at any time from their Google account settings, or by asking us. We then delete any copies we hold within 30 days, unless we must keep invoices or records by law.

Who we share it with

We only share information with trusted services that help us run the business, and only what they need:

• Cloudflare hosts this website.
• Web3Forms delivers messages from our contact form to our inbox.
• Google provides our email, the fonts on this site and, for advertising clients, Google Ads and Business Profile.
• Our bank, accountant and HMRC where needed for payments, accounts and tax.

Some of these providers may process information outside the UK. Where they do, they use the legal safeguards UK law requires.

How long we keep it

• Enquiries that do not lead to work: up to 12 months, then deleted.
• Client records, invoices and accounts: 6 years after the end of the tax year they relate to, as the law requires.
• Website security logs: kept by our host for a short period only.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong;
• delete your information (unless we must keep it by law);
• stop or limit how we use it, or object to how we use it;
• pass your information to another provider.

Just email business@itshandy.co.uk. We will reply within one month and there is no charge.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change this policy we will update the date at the top of this page.