Legal
Privacy Notice.
How Tree View Designs Ltd collects, uses, protects, and deletes personal information, and the rights you hold over it.
This notice at a glance
Minimal collection
We collect only the information you provide through this site, and only what is needed to respond.
No tracking before consent
Analytics runs only if you accept it in the cookie banner. Declining changes nothing.
Never sold
Your details are never sold, rented, or exchanged, and we use no advertising networks.
UK-first storage
Our platform is UK-hosted. Where a provider processes data elsewhere, legal safeguards apply.
Defined retention
Every category of data has a stated retention period, set out in the table below.
Accessible rights
You may access, correct, delete, restrict, or object at any time. We respond within one month.
Who we are
Tree View Designs Ltd is the data controller for personal information collected through this website. We are registered with the Information Commissioner’s Office as a data controller.
Company information
Tree View Designs Ltd
Company No. 06975947, registered in England and Wales
46 Skylark Lane, Dover, Kent, CT16 3QR
Telephone: 020 3808 9807
Data protection contact
To reach our Data Protection Officer about anything in this notice, or to exercise any of your rights, use our contact form or call us.
Scope: this notice covers the Tree View Designs website only. If you are a patient of a practice whose website we built, that practice is the controller of your data and its own privacy notice applies.
What we collect, why, and for how long
The table below sets out each processing activity on this website: the data involved, the purpose and lawful basis under UK GDPR Article 6, and the retention period.
| Activity | Data collected | Purpose and lawful basis | Retention |
|---|---|---|---|
| Send a contact enquiry | Name, practice details, email, phone, your message | To respond and discuss your requirements. Basis: taking steps at your request before a contract, and our legitimate interest in answering enquiries. | 2 years |
| Request a free website audit | Name, practice, email, phone, website address | To run the audit on your public website and email you the report. We never access private systems. Basis: taking steps at your request; marketing only with separate opt-in consent. | 12 months |
| Join the new CMS waitlist | Email address, which page you signed up from | To tell you about our next-generation CMS before general release. Basis: consent, which you can withdraw with one click or email. | 12 months |
| Arrive via a campaign link | Campaign link parameters, landing page, browser type, referring page, a first-party session identifier. Never your IP address. | To measure which marketing campaigns lead to enquiries or calls (we record a phone-number click, not the call). Basis: our legitimate interest in measuring marketing. Never used to identify you. | 12 months |
| Accept analytics cookies | Usage data via Google Analytics | To understand how the site is used and improve it. Basis: consent via the cookie banner. Decline and no analytics runs at all. | See cookie policy |
| Become a customer | Business contact details and communication history in our CRM | To manage your account, provide support, and send relevant service updates. Basis: contract and legitimate interests; marketing per your preferences. | Duration of relationship |
You are never under a statutory or contractual obligation to give us personal data. If you choose not to, the only consequence is that we can’t respond to the request the data was for. Operational server logs are kept for 30 days for security and troubleshooting.
Your rights
UK data protection law gives you all of the following rights over your personal data. Exercising any of them is free: contact our Data Protection Officer via the contact form. We respond within one month and may need to verify your identity first.
1. Access
Ask whether we hold data about you, and get a copy of it.
2. Rectification
Have inaccurate or incomplete data corrected.
3. Erasure
Ask us to delete your data. We will, unless a legal duty requires us to keep it.
4. Restriction
Ask us to pause processing your data while a concern is resolved.
5. Portability
Receive the data you gave us in a usable format, or have it sent to another organisation.
6. Objection
Object to processing based on our legitimate interests, including any direct marketing, at any time.
7. Withdraw consent
Where processing is based on consent (like the waitlist or analytics cookies), withdraw it at any time. Withdrawal doesn't affect what happened before.
8. Complain
Raise a complaint with us, and with the Information Commissioner's Office at any time.
The regulator: you can contact the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d welcome the chance to resolve any concern directly first, but you don’t have to give us one.
Profiling and automated decisions
We make no automated decisions about you and carry out no profiling. Every enquiry, audit request, and waitlist signup is read and handled by a person.
How we protect your information
- Encrypted connections (HTTPS) across the entire site
- Encrypted email and storage
- Access limited to authorised staff who need it
- Regular staff training on data protection
- Cyber Essentials Plus certification
- Annual CHECK-approved penetration testing
- Incident reporting and improvement processes
- Provider contracts requiring data protection
More detail on our security posture, accreditations, and infrastructure is on our security page.
Changes to this notice
When we change how we handle personal data, we update this notice and the date below before the change takes effect. Significant changes affecting existing customers are also communicated directly.
Last updated: 17 July 2026