How A.S Websites collects, uses and protects your personal information, explained in plain English.
Last updated: 18 October 2026
A.S Websites (“we”, “us”, “our”) is a web design and app development business based in Edgware, London. Your privacy matters to us, and this policy explains what personal information we collect through https://www.aswebsites.co.uk/ (the “website”), why we collect it and what your rights are.
We are the data controller for the personal information described here, which means we decide how and why it is used.
This policy covers our website and our online activities only. It does not cover information collected offline or through other channels. We handle your information in line with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
By using our website you acknowledge this policy. Where we need your consent for something, such as analytics cookies, we will ask you separately and you can withdraw it at any time.
We will always make it clear what we are asking for, and why, at the point you provide it.
If you fill in a form, email, call or message us (including through WhatsApp), or ask for a quote, we may receive:
If you become a client, we also hold billing details and the content you supply for your project (such as text, images and logos), plus any access details we need to do the work. We will ask you to share these securely.
When you visit the website, we and our service providers automatically receive technical information, including:
Like almost every website, our hosting and security providers keep server log files. We use them to run and secure the site and to spot trends. We do not use them to identify you personally.
We only use personal information when we have a lawful reason to. Here is what we use it for, and the legal basis behind each purpose.
Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You can object to this at any time (see Your rights).
If you are an existing client, we may occasionally email you about similar services. You can opt out of any marketing email by using the unsubscribe link or by telling us. We do not make decisions about you using automated profiling.
Cookies are small text files stored on your device. They help a website work, stay secure and understand how it is used. We use two kinds:
We do not use cookies for advertising or to build profiles about you.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors so we can count them (analytics, with consent) | Up to 2 years |
_ga_<ID> | Google Analytics | Keeps track of your session state (analytics, with consent) | Up to 2 years |
__cf_bm | Cloudflare | Helps identify and block bot traffic (security) | 30 minutes |
cf_clearance | Cloudflare | Remembers that you passed a security check (security) | Set by Cloudflare |
_GRECAPTCHA | Google reCAPTCHA | Spam and abuse protection on forms (security) | Up to 6 months |
Cookie names and lifespans are set by the providers and may change over time. Cloudflare Turnstile is described in the next section.
You can change your analytics choice at any time using our Cookie settings, or by clearing cookies in your browser. Most browsers also let you block or delete cookies. Visit your browser’s help pages for how. Blocking security cookies may stop our forms from working. You can also install the Google Analytics opt-out browser add-on.
We use a small number of trusted services to run, protect and improve the website. Each one is described below, including what it does and what information it handles.
We use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use our website so we can improve it. It uses cookies to collect information such as the pages you view, how long you stay, scroll and click activity, your device and browser type, and your approximate location. Google Analytics 4 does not log or store individual IP addresses.
We only load Google Analytics after you accept analytics cookies. We have not enabled Google Signals or any Google advertising features, and we do not use Analytics data to show you ads. Google acts as our data processor for this information. Analytics data is kept in Google Analytics for up to 14 months and is then deleted automatically.
You can learn more about how Google handles data in its Privacy Policy and on its page How Google uses information from sites or apps that use our services. To stop your data being used by Google Analytics on any website, you can install the opt-out browser add-on.
This site is protected by reCAPTCHA. We use Google reCAPTCHA v3 on our forms to tell real people from automated spam. It runs quietly in the background, with no puzzles for you to solve. To do this, it collects information about your device and browser, and how you interact with the page, such as hardware and software details and the results of integrity checks, and sends it to Google for analysis. Google then gives us a score telling us how likely the visit is to be human.
We use this information only to protect our website and forms from abuse, relying on our legitimate interest in keeping them secure. Google acts as our data processor for this purpose and handles the data under its Cloud Data Processing Addendum.
Our website sits behind Cloudflare, which provides DNS, content delivery, firewall and protection against attacks and malicious traffic. When you visit, your request passes through Cloudflare’s network, so Cloudflare processes technical information such as your IP address, request details, browser information and security signals. It may also set the security cookies listed above.
We use Cloudflare to keep the website fast, available and secure. This is in our legitimate interests, and Cloudflare handles this data on our behalf as our processor. Cloudflare also processes some network and security data for its own purposes, as described in its own policies.
We use Cloudflare Turnstile on our forms to check that a visitor is a real person and not a bot. It is a privacy-focused alternative to traditional CAPTCHAs and normally needs no puzzle from you.
What Turnstile processes. Turnstile looks at a small set of technical signals, including your IP address, TLS fingerprint, User-Agent header, and the site key and website where the check appears. Cloudflare states that it cannot directly identify individuals from these signals, and that it uses them only to detect and block bots, not to identify, profile or target you. These signals are strictly necessary for bot detection.
Who is responsible. When Turnstile protects our website, Cloudflare acts as our processor. It follows our instructions and we are the controller. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): keeping our website and forms safe from abuse. Cloudflare also uses the same signals as an independent controller to improve Turnstile’s bot detection, relying on its own legitimate interests. That use is governed by Cloudflare’s Turnstile Privacy Addendum and Privacy Policy.
Your rights. If you have questions or want to exercise your data protection rights about our use of Turnstile, contact us. For Cloudflare’s own use of Turnstile data, you can contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.
To display the website properly, your browser loads fonts from Google Fonts and some scripts from content delivery networks such as jsDelivr. Your browser sends a request to these providers’ servers, so they receive your IP address and basic browser details. They do not use this to track you across websites for advertising.
Our website links to our Facebook, Instagram and X profiles and offers a WhatsApp contact button. These are simple links. Nothing is shared with those services until you click one, and from then on their own privacy policies apply. If you message us on WhatsApp, we receive your phone number and the messages you send.
This policy does not cover other websites or services, even where we link to them. Please read their privacy policies for details, including how to opt out of anything you do not want.
We do not sell your personal information and we do not share it with third parties for advertising. We only share it when we need to, with:
Our providers may only use your information to provide their services to us, and in line with their agreements with us.
Some of our providers, including Google and Cloudflare, are based in or process data in the United States and other countries outside the UK. Where that happens, we make sure your information is protected by an appropriate safeguard. This may be the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”) for certified providers, or standard contractual clauses with the UK addendum or the UK International Data Transfer Agreement. You can contact us for more detail.
We keep personal information only for as long as we need it. Typical periods are:
After these periods we delete or anonymise your information, unless the law requires us to keep it longer.
We protect your information with measures such as encrypted (HTTPS) connections, access controls and carefully chosen providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach puts your rights at risk, we will tell you and the Information Commissioner’s Office (ICO) as the law requires.
Under UK data protection law, you have the following rights:
To use any of these rights, email info@aswebsites.co.uk. We may need to check your identity first. There is normally no charge. We will respond within one month, and let you know if a complex request needs longer.
We would like the chance to put things right, so please contact us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office, on 0303 123 1113.
We are based in the UK. We do not sell personal information or share it for cross-context behavioural advertising. If you live in California, you may have the right to know what personal information we hold, and to ask us to delete or correct it. Contact us and we will respond within the time the law requires.
Protecting children online is important to us. We encourage parents and guardians to take an active part in their children’s online activity.
Our website and services are for businesses, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us straight away and we will delete it promptly.
We may update this policy from time to time, for example if we add a new service or the law changes. The “last updated” date at the top of this page shows when it last changed. If we make an important change, we will make it clear on the website.
Questions about this policy, or want to use your data rights? Get in touch and we will happily help.
Tell us a little about what you need and we’ll come back with a clear, honest quote — usually within a day or two.
We use essential cookies to keep this site secure. With your OK, we also use Google Analytics to see which pages are useful. We never use advertising cookies.