Privacy Policy

This Privacy Policy explains how We Get Websites ("We Get Websites", "we", "us", "our"), operated from Malta, collects, uses, stores, and protects personal information when you visit https://wegetwebsites.com or interact with us through any of our contact forms, tools, or advertising channels. By using this website, you agree to the practices described in this policy.

This policy applies to all visitors, leads, and clients worldwide. Where applicable, it addresses the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and equivalent data protection laws in other jurisdictions.

1. Who We Are

We Get Websites is a web design and digital services business registered in Malta. We design and build websites for small businesses, freelancers, and ecommerce brands. For the purposes of data protection law, We Get Websites is the data controller of the personal information we collect through this website.

You can contact our data controller at: hello@wegetwebsites.com

2. Data We Collect

We may collect the following categories of personal information:

• Identity data: your name
• Contact data: email address, phone number
• Business data: business name, website URL, type of service requested
• Project data: budget range, timeline, project brief, and notes you provide
• Technical data: IP address, browser type, device type, operating system, referral source, pages visited, and session duration (collected automatically via analytics)
• Communication data: records of messages sent through our contact forms or WhatsApp
• Lead source data: which advertising campaign, keyword, or landing page led to your enquiry

We do not collect sensitive personal data (such as health information, biometric data, political opinions, or financial account details). We do not knowingly collect payment card numbers — all transactions are handled through third-party payment processors if applicable.

3. How We Collect Data

We collect personal data through the following methods:

• Contact forms on this website (Contact page, Free Website Mockup request form, Website Cost Calculator lead form)
• Google Ads Lead Form Extensions — when you submit a lead form directly within a Google advertisement
• WhatsApp conversations initiated by you through links on this website
• Email correspondence initiated by you
• Cookies and analytics tools (see the Cookies section below)
• Referral or recommendation from an existing client (we will inform you if this occurs)

4. Why We Collect It — Purposes of Processing

We collect and use your personal data for the following specific purposes:

• To respond to enquiries about web design, landing pages, ecommerce, hosting, SEO, and related services
• To prepare and deliver quotations, proposals, and cost estimates
• To fulfil service contracts — designing, building, and maintaining websites
• To communicate project updates, revisions, and delivery
• To send relevant follow-up information if you have expressed interest (you may opt out at any time)
• To improve the quality of our website, landing pages, and advertising campaigns
• To comply with legal obligations including tax, financial record-keeping, and data protection law

We do not use your data for any automated decision-making that has a legal or significant effect on you, and we do not sell your personal data to third parties for their own marketing purposes.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases under GDPR Article 6:

• Legitimate interests (Article 6(1)(f)): responding to business enquiries, preparing quotes, following up on expressed interest, improving our services and advertising — where our interests do not override your rights
• Contract performance (Article 6(1)(b)): processing necessary to deliver services you have engaged us for
• Legal obligation (Article 6(1)(c)): retaining financial and tax records as required by applicable law
• Consent (Article 6(1)(a)): where you have explicitly opted in to receive marketing communications — you may withdraw consent at any time by emailing us

6. Third Parties and Data Processors

We work with the following third-party service providers who may process your personal data on our behalf. Each is bound by a data processing agreement or equivalent safeguards:

We do not sell, rent, or share your personal data with unaffiliated third parties for their own marketing purposes.

7. Google Ads and Lead Form Extensions

We advertise using Google Ads and may use Google Lead Form Extensions, which allow users to submit contact details directly within a Google search or display advertisement without visiting our website.

In compliance with Google's requirements and applicable data protection law:

• Data collection method: We collect names and email addresses (and optionally phone numbers, business names, and project details) through Google Ads Lead Form Extensions on behalf of We Get Websites.
• Purpose of use: Data submitted through these forms is used exclusively to respond to enquiries about web design, website quotations, and related services offered by We Get Websites.
• Third-party disclosure: Google LLC acts as a service provider and data processor in transmitting lead form submissions to us. Google may also process data for its own advertising measurement and fraud prevention purposes under its own privacy policy.
• Retention: Lead form data received from Google is stored in our database and retained for 24 months from the date of submission, unless you request earlier deletion.

If you submitted a lead form through a Google advertisement, you may contact us at hello@wegetwebsites.com to access, correct, or delete the data we received.

8. AI and Automated Systems — 2026 Disclosure

In compliance with applicable regulations effective in 2026 regarding the disclosure of AI-powered tools:

This website includes an interactive website builder tool on the homepage that uses automated logic to preview website section layouts and simulate a conversational planning experience. This tool is powered by pre-programmed logic and does not involve real-time AI language generation. It does not collect personal data during interaction.

If we deploy any AI-powered chatbot, virtual assistant, or automated response system that interacts with you in a conversational format, we will clearly disclose this at the point of interaction. You will always be informed when you are communicating with an automated system rather than a human member of our team.

At present, all enquiries submitted through our contact forms and WhatsApp are reviewed and responded to by a human member of our team. No automated system makes decisions about your enquiry without human review.

9. Cookies and Tracking Technologies

This website may use cookies and similar tracking technologies. Cookies are small text files stored on your device that help us analyse site traffic and improve user experience.

We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function (session management, security). These cannot be disabled.
• Analytics cookies: we may use Google Analytics or a privacy-respecting equivalent to understand how visitors use the site. These collect aggregated, anonymised data about page visits and user behaviour.
• Advertising cookies: Google Ads conversion tracking and remarketing cookies may be placed when you arrive from a Google advertisement. These help us measure the effectiveness of our advertising and may be used to serve relevant ads to you on other platforms.

You can control or disable non-essential cookies through your browser settings or a consent management tool if one is present on this website. Disabling analytics or advertising cookies will not affect your ability to use the website.

For Google's data practices, see: policies.google.com/privacy

10. How Long We Keep Your Data

• Enquiry data (name, email, project brief): retained for 24 months from the date of submission. If we enter into a service contract, retained for 7 years for legal and financial record-keeping.
• Active client project data: retained for the duration of the project plus 7 years.
• Analytics and technical data: aggregated analytics data retained for 26 months. Raw server logs retained for 30 days.
• Email correspondence: retained for 5 years from the last communication.
• Financial records: retained for 7 years as required by Maltese and EU tax law.

After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion at any time (see Your Rights).

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal retention obligations
• Right to restriction: request that we limit how we use your data while a dispute is resolved
• Right to data portability: request your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or direct marketing at any time
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: with your national data protection authority (EU residents: your local DPA; UK residents: the ICO at ico.org.uk)

To exercise any of these rights, email us at hello@wegetwebsites.com with your name and the nature of your request. We will respond within 30 days. We may need to verify your identity before processing certain requests.

12. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA grants you additional rights:

• Right to know: the categories and specific pieces of personal information we have collected about you in the last 12 months
• Right to delete: request deletion of personal information we have collected, subject to certain exceptions
• Right to correct: request correction of inaccurate personal information
• Right to opt out of sale or sharing: we do not sell personal information to third parties. We do not share personal information for cross-context behavioural advertising without your consent.
• Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights
• Right to limit use of sensitive personal information: we do not collect sensitive personal information as defined under CCPA

To submit a CCPA request, contact us at hello@wegetwebsites.com. We will respond within 45 days.

13. International Data Transfers

We Get Websites is based in Malta (EU). Your personal data may be transferred to and processed in countries outside the EEA, including the United States, in connection with our use of third-party service providers (Supabase, Google, WhatsApp, hosting infrastructure).

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) adopted by the European Commission
• Adequacy decisions where the destination country is recognised as providing equivalent protection
• Data Processing Agreements with sub-processors that require equivalent protection standards

You may request information about the specific safeguards in place for any third-country transfer by contacting us at hello@wegetwebsites.com.

14. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• All data transmitted to and from this website is encrypted using HTTPS/TLS
• Database access is restricted using row-level security policies and role-based access controls
• Access to personal data is limited to personnel who require it to fulfil their duties
• We use secure, reputable cloud infrastructure providers with their own security certifications

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect your data has been compromised, please contact us immediately at hello@wegetwebsites.com.

15. Children

This website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@wegetwebsites.com and we will delete it promptly.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the website after any changes constitutes your acceptance of the updated policy.

We encourage you to review this page periodically. If you have concerns about any changes, please contact us.

17. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact:

If you are an EU or UK resident and are not satisfied with our response, you have the right to lodge a complaint with your national data protection supervisory authority.