Legal
Privacy and cookies.
Last updated 12 October 2026
The short version
- We only collect what you give us, plus the basic technical information every website needs to work.
- We use it to reply to you, to build and look after your website, and to keep our accounts.
- We don't sell it, and we don't use advertising or tracking cookies.
- You can ask to see, correct or delete your information at any time: [email protected].
Who we are
ReMarque is a web design and development studio run by Abdulrehman Shaker, a sole trader, trading as ReMarque. We are the "controller" of the personal information described here, which means we decide how it's used.
Contact: [email protected], 07305 601684.
Based in Birmingham, UK.
What we collect, and why
| When | What | Why, and our lawful basis |
|---|---|---|
| You send the contact form | Your name, business name, email, and anything you choose to add: phone number, current website, what you need, your message and how you'd like us to reply. | To reply and arrange a consultation. Basis: taking steps at your request before a possible contract, and our legitimate interest in answering enquiries. |
| You email, call or WhatsApp us | Your contact details and whatever you send us. | To reply and help you. Basis: as above. |
| You become a client | Your name, email, phone, business details, the content for your website, your change requests and our notes about the project. | To design, build, host and look after your website. Basis: performing our contract with you. |
| You use the client portal | Your email address, your sign-in activity, and the requests and approvals you send. | To give you secure access to your project. Basis: performing our contract with you. |
| We invoice you, or you pay | Your name, business, the services and what you paid. If you pay by bank transfer or standing order, we see the payer name and reference on our bank statement. If you pay by card online, Stripe collects your card details on its own secure page: we never see them. | To take payment and keep accounts. Basis: performing our contract with you, and legal obligation (tax law). |
| You send us files | Photos, logos, menus and documents you upload in the portal. | To build and update your website. Basis: performing our contract with you. |
| Anyone visits the website | Technical information such as your IP address, browser and the pages you view. | To deliver the site securely and count visits in total. Basis: our legitimate interest in running a secure, working website. |
You don't have to give us anything, but without your name and email we can't reply to an enquiry, and without your details we can't build your website.
Who helps us
We use a small number of trusted providers to run the business. They act on our instructions and can't use your information for their own purposes.
- Cloudflare hosts this website, handles our domain and email forwarding, provides cookie-free visitor statistics, and checks contact-form submissions for spam (Cloudflare Turnstile).
- Google (Firebase) runs the client portal: signing in, and storing projects, requests, enquiries and files. Portal data and files are stored in London.
- Stripe takes online payments. Stripe may also use payment information for its own purposes, such as preventing fraud, under its own privacy policy.
- Google (Gmail) is our email inbox.
- If you choose to message us on WhatsApp, that conversation is handled by WhatsApp under its own privacy policy.
We don't sell your information, and we only share it otherwise if the law requires us to.
Information that leaves the UK
Cloudflare runs a global network, Firebase's sign-in service runs in the United States, and Stripe processes payments internationally. Google, Cloudflare and Stripe are certified under the UK Extension to the EU-U.S. Data Privacy Framework, which UK law treats as giving adequate protection.
How long we keep it
- Enquiries that don't lead to work: 12 months from our last contact, then deleted.
- Client project information, files and portal accounts: while we work together, then 12 months after the work ends.
- Invoices and accounting records: as long as tax law requires, which for us is at least five years after the 31 January filing deadline for the tax year concerned.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, or restrict or object to how we use it, and in some cases to send it to you or someone else in a portable format. There's no charge, and we'll reply within one month. Email [email protected].
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Cookies and browser storage
We don't use advertising, tracking or social media cookies, so there's no cookie banner. We only store what's strictly needed for things you ask for:
- Signing in to the portal: your browser remembers that you're signed in, and briefly remembers the email you asked for a sign-in link with, so the link works. Signing out clears it.
- Spam protection on the contact form: Cloudflare Turnstile checks that a real person is sending the form, using technical signals such as your IP address and browser. This is strictly necessary to stop automated spam. Cloudflare may also use these signals to improve its bot detection.
- Visitor statistics: Cloudflare Web Analytics counts visits without cookies or any other storage in your browser, and doesn't identify you.
Changes
If we change how we use your information, we'll update this page and the date at the top.