Privacy Policy
How we collect, use and protect your personal information.
Last Updated: August 2026
Contents
1. Who We Are
CtrlAltComplete is a UK-based web design and digital services business located at Office 1, Izabella House, 24–26 Regent Place, City Centre, Birmingham, B1 3NJ.
We provide services including website design and development, website hosting, website maintenance and support, website security and optimisation, Microsoft 365 and business email setup, Google Business Profile services, website reporting, content services and other related digital services.
For the purposes of UK data protection law, CtrlAltComplete is the data controller for personal information covered by this Privacy Policy.
For privacy-related enquiries:
- Email: enquiries@ctrlaltcomplete.co.uk
- Telephone: 0121 794 3680
2. Information We Collect
The personal information we collect depends on how you interact with us and which services you use.
This may include:
Contact and enquiry information
Your name, business name, email address, telephone number, service interests and any information you provide when contacting us or submitting an enquiry.
Customer and project information
Information required to provide services, manage projects, communicate with you and maintain our business relationship.
Billing and transaction information
Information relating to quotations, invoices, payments and services purchased. Payment card details are not stored by us where payments are processed through a third-party payment provider.
Website and technical information
Where necessary to provide a service, we may process website addresses, domain information, hosting information, technical configuration information and access credentials supplied to us.
Service access information
Where you ask us to configure or support third-party platforms, such as Microsoft 365, Google Business Profile or website services, we may be provided with appropriate access to those services.
Communications
Emails, messages and other correspondence between you and CtrlAltComplete.
Website usage information
Information about how visitors interact with our website, which may include pages visited, browser/device information and similar usage information where analytics technologies have been accepted.
3. How We Use Your Information
We may use personal information to:
- Respond to enquiries and provide quotations.
- Take steps requested by you before entering into a contract.
- Deliver, administer and support services you purchase from us.
- Communicate with you about projects, services and your account.
- Process and maintain business and financial records.
- Provide website hosting, support, maintenance and other managed services.
- Configure or support third-party services where you have asked us to do so.
- Maintain the security and operation of our website and services.
- Understand how our website is used and improve our website and services where appropriate.
- Establish, exercise or defend legal claims.
- Comply with legal, regulatory, accounting and tax obligations.
We do not sell or rent your personal information.
We do not share your personal information with third parties for their own unrelated marketing purposes.
4. Lawful Bases for Processing
Under UK GDPR, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract
Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.
Legitimate Interests
Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.
Legal Obligation
Where we need to process or retain information to comply with legal, accounting, tax or regulatory requirements.
Consent
Where we specifically ask for your consent, including where required for non-essential cookies and analytics technologies.
Where we rely on consent, you may withdraw that consent at any time.
5. How Long We Keep Your Information
We only retain personal information for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting and regulatory requirements.
Typical retention periods include:
Enquiries
Enquiry and contact information may normally be retained for up to 24 months following the last meaningful interaction where the enquiry does not become a customer relationship.
Customer and project records
Information relating to customers, projects and services may be retained for the duration of our relationship and for an appropriate period afterwards where required for business, legal, accounting, tax, dispute or record-keeping purposes.
Financial records
Invoices, transaction records and related financial information may be retained for the period required by applicable UK tax and accounting requirements.
Analytics information
Analytics information is retained according to the retention settings configured within the relevant analytics service.
Access credentials
Credentials provided solely to complete work will not be retained longer than reasonably necessary unless continued access is required to provide an ongoing service.
When information is no longer required, we will securely delete, anonymise or otherwise dispose of it as appropriate.
7. International Data Transfers
Some service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure the transfer is made in accordance with applicable UK data protection law.
Where required, this may include relying on UK adequacy regulations or appropriate contractual safeguards.
You can contact us for further information about safeguards relevant to your personal information.
9. Your Data Protection Rights
Depending on the circumstances and lawful basis, UK data protection law may give you rights including:
- Access to personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Erasure in certain circumstances.
- Restriction of processing in certain circumstances.
- Objection to certain processing.
- Data portability in certain circumstances.
- Withdrawal of consent where processing relies on consent.
These rights are not absolute and may not apply in every circumstance.
To exercise your rights, contact: enquiries@ctrlaltcomplete.co.uk
We will respond within the timeframe required by applicable data protection law, normally within one month.
10. Security
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or destruction.
Measures may include:
- Encrypted website connections using SSL/TLS.
- Access controls and restricted access.
- Appropriate authentication and account security.
- Secure hosting and infrastructure.
- Software and security maintenance.
- Appropriate backup and recovery measures where applicable.
No internet-based system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we process.
11. Third-Party Websites and Services
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of third-party websites.
Where you use a third-party service in connection with services provided by CtrlAltComplete, that provider may also process personal information according to its own privacy policy.
12. Providing Information to Us
Certain information may be necessary for us to respond to an enquiry, provide a quotation, enter into a contract or deliver a service.
If you do not provide information that is reasonably required, we may be unable to provide the requested service or complete certain work.
13. Automated Decision-Making
CtrlAltComplete does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.
14. Complaints
If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information Commissioner's Office
Website: ico.org.uk
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or how we process personal information.
The latest version will always be published on this page with the updated “Last updated” date.
Where a change materially affects how we use personal information, we will take appropriate steps to bring that change to the attention of affected individuals where required.