1. Who We Are
BaseFrame is a sole trader business operating in Washington, United Kingdom. BaseFrame is the data controller of the personal data described in this policy. Contact: sales@baseframe.uk
2. Personal Data We Collect
We may collect: identity & contact information (name, business name, email, telephone, billing address); financial information via GoCardless and Xero; account access & technical information (website credentials, hosting and domain access); business information & media (hours, service descriptions, branding); communications & records (email, call notes, call recordings, review responses); prospect & marketing information (publicly available contact details, form submissions, social media interactions); and website usage data (IP address, browser type, device, pages visited, interaction data).
3. How We Use Your Data
To provide social media management, website design and online presence management services, manage subscriptions and accounts, process payments, deliver agreed services, communicate, respond to enquiries, conduct outreach and marketing, improve website performance, measure advertising performance, and comply with legal, tax, and accounting obligations.
4. Legal Basis for Processing
Contract — to provide agreed services. Legitimate Interests — for business operations, outreach, and improvement. Legal Obligation — for financial and regulatory compliance. Consent — for marketing emails and non-essential cookies.
5. Marketing & Communications
We may communicate via email, telephone, social media, direct messages, website forms, and digital advertisements. Where required by law, consent is obtained before sending marketing emails. You may unsubscribe at any time: sales@baseframe.uk. We conduct manual outreach only and do not purchase marketing lists.
6. Advertising & Analytics
We may use digital advertising and analytics tools to measure website traffic, analyse visitor behaviour, improve marketing, and retarget visitors where applicable. These may use cookies, tracking pixels, or similar technologies. Consent is obtained where required.
7. Third-Party Processors
Web3Forms (enquiry delivery), Netlify (hosting), GoCardless (payments), Xero (accounting), Google Analytics, Google Drive, AI content tools, social media and advertising platforms, GitHub. We take reasonable steps to ensure third parties process data securely and lawfully. We do not sell personal data.
8. Data Storage & Security
Data may be stored in secure cloud storage, encrypted external drives, and restricted-access spreadsheets. We implement appropriate technical and organisational measures to protect data. Clients are responsible for the security of their own accounts outside BaseFrame's systems.
9. Data Retention
Client data is retained as long as necessary to provide services and meet legal obligations. Prospect data is retained only as long as necessary. Data no longer required is securely deleted.
10. International Transfers
Some third-party providers may process data outside the United Kingdom. Where this occurs, appropriate safeguards are implemented in accordance with UK GDPR.
11. Your Rights
You have the right to access, correct, erase, restrict, object to, or port your personal data, and to lodge a complaint with the ICO. Contact: sales@baseframe.uk
12. Children
Our services are intended for businesses and are not directed at individuals under 18 years of age.
13. Changes
This policy may be updated from time to time. The latest version will always be available on our website.