Professional Websites Built for Local Business Growth.
Professional Websites Built for Local Business Growth.
Last updated: 7 October 2026
This website is operated by Mr Andrew Lewis, trading as A Lewis • Website • Design • Marketing. I am a sole trader based in Crowborough, East Sussex, UK.
Data controller: Mr Andrew Lewis
Trading name: A Lewis • Website • Design • Marketing
Email: andy@alewiswebsites.co.uk
Telephone: +44 7790 133223
I do not display a temporary residential address on this website. For privacy enquiries, please use the email address or telephone number above.
Depending on how you use the website, I may collect:
– your name;
– email address;
– telephone number;
– company or organisation name;
– enquiry, project and service requirements;
– files that you choose to upload;
– information contained in messages or correspondence;
– IP address, browser and device information;
– pages visited and website interaction information;
– cookie, consent and accessibility preferences; and
– information needed to protect the website from spam, abuse or security threats.
The website contact form does not ask for payment or invoice details. Please do not send health information, financial information, passwords or other sensitive personal information through a general enquiry form unless it is genuinely necessary and we have agreed a secure method of sending it.
Information may be collected when you:
– complete an enquiry form;
– email, telephone or WhatsApp me;
– contact me through Facebook, Instagram, LinkedIn or X;
– visit or use the website;
– accept, reject or change cookie preferences; or
– communicate with me during a quotation or client project.
Personal information may be used to:
– respond to enquiries and requests for information;
– discuss your requirements and prepare quotations;
– provide website design, graphic design, digital marketing and SEO services;
– manage client projects and service communications;
– send information directly related to an enquiry, quotation or service;
– prevent spam, fraud, abuse and unauthorised access;
– maintain website security and performance;
– understand website usage where analytics consent has been provided;
– maintain appropriate business, accounting and legal records; and
– send marketing communications only where a lawful basis and any required consent apply.
I do not currently use marketing or advertising pixels.
Depending on the activity, the lawful basis may be:
Enquiries and quotations: processing is necessary to take steps at your request before entering into a contract, or for legitimate interests in responding to genuine business enquiries.
Client and project work: processing is necessary to perform a contract or to take steps requested before a contract is formed.
Legal, accounting and business records: processing is necessary to comply with legal obligations or for legitimate interests in maintaining accurate business records and dealing with disputes.
Security and spam prevention: processing is based on legitimate interests in protecting the website, systems and users, and where applicable on legal obligations relating to security and fraud prevention.
Analytics and measurement: analytics should be used only in accordance with the visitor’s cookie and consent choices. Analytics consent can be withdrawn through the website’s cookie settings.
Marketing communications: marketing must be sent only where the applicable UK privacy and electronic-marketing rules are satisfied. Where consent is relied on, consent should be freely given, specific, informed and capable of being withdrawn. Every marketing message should include a clear way to unsubscribe.
The website uses an Elementor form to collect enquiries. The form may request your name, email address, telephone number, company name, project or service requirements, message and an optional file upload.
Elementor form submissions are stored in WordPress for up to one year unless they are deleted earlier or a longer period is required for an active client relationship, legal obligation or dispute. Enquiry messages may also be sent to an A Lewis email account hosted through Simply Hosting Cloud. Client, accounting and legal records may be retained for up to ten years where required for business, contractual, tax, legal or dispute-related purposes.
Do not send confidential passwords, payment-card details or unnecessary special-category information through the form.
Enquiries may also be received by telephone, WhatsApp, Facebook, Instagram, LinkedIn or X. Information received through those services may be processed to respond to your request, prepare a quotation, provide services or maintain appropriate business records.
Those platforms operate their own services and privacy policies. If you contact A Lewis through a social-media platform, that platform may process your information independently of A Lewis.
The website uses cookies and similar technologies. Details of the cookies currently detected, their purposes, durations and consent categories are provided in the Cookie Policy:
The website may use Google Analytics 4 and Google Tag Manager to measure visits, page views, interactions and general website performance. These services should be configured so that non-essential analytics processing follows the visitor’s consent choices through Elementor Cookie Consent and Google Consent Mode.
The live configuration should be checked before publication to confirm whether Google Analytics or Google Tag Manager loads before or after consent, the Google Analytics retention setting, Google Signals, IP settings and any other measurement features.
Depending on the page visited and your consent choices, the website may connect to or use the following services:
– Simply Hosting Cloud, operated by Team Blue Internet Services UK Limited trading as Simply Hosting, for website hosting and email;
– WordPress and Elementor Pro for website operation and content management;
– Elementor Cookie Consent for managing cookie preferences;
– Elementor Ally Web Accessibility to support accessibility testing and improvements;
– Google Analytics 4 and Google Tag Manager for measurement and tag management;
– Google reCAPTCHA for spam and abuse prevention;
– Google Maps through the Elementor Pro Google Maps widget;
– YouTube videos, where embedded;
– LiteSpeed Cache and WP-Optimize for website performance and optimisation; and
– Facebook, Instagram, X, LinkedIn and WhatsApp where you choose to follow, contact or visit those services.
The exact privacy links, data locations and international-transfer arrangements for these providers should be checked against the current supplier documentation and website configuration. A service may process information under its own privacy notice when you interact with it or when its content is loaded.
Google Maps and YouTube may request information from Google when their content is loaded. Where available, embedded content should be blocked until the relevant consent has been provided. YouTube embeds should use the privacy-enhanced youtube-nocookie.com option where suitable.
Social-media icons that are only ordinary links generally do not create the same cookies as an embedded social-media feed or widget. The live website should be checked to confirm whether any social-media items are links or embedded components.
Personal information may be shared with service providers who process it for website hosting, email delivery, form handling, security, accessibility, analytics, performance, embedded content or business administration.
I do not sell personal information. I do not share information with third parties for their own advertising purposes unless this policy is updated and the appropriate legal basis and consent are in place.
Information may also be disclosed where necessary to comply with a legal obligation, protect the rights and safety of people or systems, investigate suspected fraud or abuse, or establish, exercise or defend legal claims.
Some technology providers may process information outside the United Kingdom. The current locations, transfer mechanisms and safeguards should be confirmed from the relevant provider contracts, Data Processing Agreements and privacy notices before this section is finalised.
Where a transfer is made, appropriate safeguards should be used where required by UK data-protection law.
The current working retention periods are:
– routine enquiries: up to one year;
– unsuccessful quotations: up to one year;
– client and project records: up to ten years where required for an active relationship, contractual evidence, accounting, legal obligations or disputes;
– accounting and legal records: up to ten years;
– emails and general correspondence: up to one year unless needed for an active relationship, contractual evidence, legal obligation or dispute;
– Elementor form submissions: up to one year;
– security logs: up to one year, subject to the hosting and security configuration;
– Google Analytics information: according to the live Google Analytics retention setting; and
– cookie information: according to the expiry periods and categories described in the Cookie Policy.
Information may be deleted sooner when it is no longer needed. The ten-year period applies to client, accounting and legal records where those records are needed for business, contractual, tax, legal or dispute-related purposes; it does not automatically mean that every enquiry, form submission, cookie or analytics record is kept for ten years. The retention schedule should be reviewed with an accountant or solicitor before publication.
Measures currently used or reported for the website include HTTPS/SSL, strong WordPress administrator passwords, regular WordPress and plugin updates, firewall or malware protection, encrypted backups, Google reCAPTCHA and hosting-provider security controls.
Two-factor authentication and separate administrator access controls are not currently confirmed as being enabled. Access should therefore be reviewed and strengthened where possible.
No internet transmission or storage system can be guaranteed to be completely secure. If a personal-data breach occurs, it will be assessed and managed in accordance with applicable legal requirements.
This website is intended for adults and business customers. I do not knowingly collect personal information from children. If you believe that a child has provided personal information, please contact me so that it can be reviewed and deleted where appropriate.
I do not use personal information to make solely automated decisions that produce legal or similarly significant effects. I do not use the website for individual profiling of this kind.
Subject to legal conditions and exemptions, you may have the right to:
– be informed about how your information is used;
– request access to your personal information;
– ask for inaccurate information to be corrected;
– ask for information to be erased;
– ask for processing to be restricted;
– object to certain processing, including direct marketing;
– request data portability where applicable; and
– withdraw consent where processing is based on consent.
To exercise a right, contact: andy@alewiswebsites.co.uk. Please describe your request clearly. I may need to verify your identity before responding. If you use a third-party platform such as Facebook, Instagram, LinkedIn, X or WhatsApp, you may also need to exercise rights directly with that platform.
For privacy questions, data-rights requests or concerns about how personal information is handled:
A Lewis • Website • Design • Marketing
Data controller: Mr Andrew Lewis
Email: andy@alewiswebsites.co.uk
Telephone: +44 7790 133223
If you are unhappy with how personal information has been handled, please contact me first so that I can investigate the concern.
You may also complain to the UK Information Commissioner’s Office:
This Privacy Policy may be updated when the website, services, forms, suppliers, analytics settings, cookie-consent settings or legal requirements change. The latest version will be published on this page with the updated date.
