Privacy notice

1. Who controls your data

MadePossible Agency is the controller of the personal data described in this notice. We only collect what we need to quote, deliver and support your website.

2. What we collect

• Contact details you give us: name, email, phone, business name and country.
• Order details: the package you choose, the amounts due, and your billing status.
• Project content: your brief, page copy, logos and images you upload.
• Payment references from our payment provider. We never receive your full card details.
• Messages you send us through the contact form, project area or email.

3. Why we use it

To prepare quotations, deliver your website, take payment, provide support and meet our legal and accounting obligations. Where we rely on consent — for example an optional marketing email — you can withdraw it at any time.

4. Who we share it with

Our payment provider processes card payments. Our hosting, email and file storage providers process data on our behalf. We do not sell your personal data, and we do not share it for third-party advertising.

5. How long we keep it

We keep order and accounting records for as long as the law requires. Project files are kept while your website is live and for a reasonable period afterwards so we can support you. You can ask us to delete content we no longer need.

6. Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to certain processing, or ask us to restrict it. Use the contact form and we will respond within the time the law allows.

7. Cookies

We use essential cookies only. See the cookies page for detail.

8. Security

Access to orders, briefs and project files is restricted. We never ask for hosting or domain passwords by email or in an ordinary form — we use secure access delegation instead.