Privacy Notice

Last updated: 2026.

This notice explains how Galwad Works handles personal data. The site uses no cookies, no analytics, and no third-party tracking.

Who controls your data

Galwad Works is the trading name of Anthony Steven George, a sole trader and the data controller for this website. Service-of-documents address:

You can reach us by phone on 07977 900 495 or by email at galwadworks@gmail.com.

Registered with the Information Commissioner's Office under the data protection fee scheme. Registration reference: ZC137493.

What we process

• You contact us by phone, email, or WhatsApp. We keep your contact details and the content of your message.
• We contacted you first. Where we approach a business about our services, we hold the business name, trade, town, phone number, and whether the business already has a website or a Google Business Profile. We take this from publicly available sources: Google Business Profile listings, business directories such as Thomson Local, open datasets such as Overture Maps, and public registers such as the Natural Resources Wales waste carrier register and TrustMark. We do not buy marketing lists.
• You become a client. We process the content needed to build and maintain your website. The full list is in your service agreement.
• Hosting logs. Netlify briefly logs requests, including IP addresses, for security and delivery. We do not analyse those logs.

Why we process it

• Replying to enquiries: legitimate interest.
• Approaching a business about our services: legitimate interest, namely offering a relevant service to a local trade business. You can object at any time and we will stop.
• Delivering work to clients: contract.
• Tax, accounting, and insurance records: legal obligation.

Who else sees it

We use a small set of providers, each with its own privacy notice:

• Netlify (US, GDPR-compliant). Hosts this website.
• WhatsApp / Meta (US / EU). Carries WhatsApp messages, if you choose that channel.
• Monzo Bank (UK, FCA regulated). Holds business banking records.
• HMRC (UK government). Receives tax-relevant information.
• Welsh-language reviewer (UK). Sees signed-off English content for translation. Does not see your personal contact details.

We do not sell or share your personal data for marketing.

How long we keep it

• Enquiries that do not become work: cleared within 6 months.
• Businesses we approached who did not become clients: cleared within 12 months, except the name and the fact that you asked us not to contact you again, which we keep so that we do not.
• Quote and proposal records: 2 years.
• Client records (contracts, invoices, content): kept for at least 5 years from the 31 January Self Assessment deadline for the relevant tax year, in line with HMRC requirements.

If we contacted you first

If we approached you and you had not contacted us, we collected your details from a public source rather than from you. We tell you which source at the first message or call, and the categories are listed above under "What we process".

Our lawful basis is legitimate interest. That means you have an absolute right to object to marketing: say so by any route, including replying to the message, and we stop and add you to a do-not-contact list. Keeping that list is the only reason we retain anything about you afterwards.

We screen numbers against the Telephone Preference Service and the Corporate Telephone Preference Service before calling, and we do not send marketing texts or WhatsApp messages unless you have asked us to.

Your rights

Under UK GDPR you can ask us to: tell you what we hold, correct it, delete it (where lawful), restrict or object to its use, or hand it back in a portable format. Email galwadworks@gmail.com and we respond within one calendar month.

Complaints

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or call 0303 123 1113.

Changes

We update this notice when our practices change. The date at the top reflects the most recent revision.