Skip to main content
Tree View Designs — home

This notice at a glance

Minimal collection

We collect only the information you provide through this site, and only what is needed to respond.

No tracking before consent

Analytics and ad conversion measurement run only if you accept them in the cookie banner. Declining changes nothing.

Never sold

Your details are never sold, rented, or exchanged with anyone.

UK-first storage

Our platform is UK-hosted. Where a provider processes data elsewhere, legal safeguards apply.

Defined retention

Every category of data has a stated retention period, set out in the table below.

Accessible rights

You may access, correct, delete, restrict, or object at any time. We respond within one month.
1

Who we are

Tree View Designs Ltd is the data controller for personal information collected through this website. We are registered with the Information Commissioner’s Office as a data controller.

Company information

Tree View Designs Ltd

Company No. 06975947, registered in England and Wales

46 Skylark Lane, Dover, Kent, CT16 3QR

Telephone: 020 3808 9807

Data protection contact

To reach our Data Protection Lead about anything in this notice, or to exercise any of your rights, use our contact form or call us.

Scope: this notice covers the Tree View Designs website only. If you are a patient of a practice whose website we built, that practice is the controller of your data and its own privacy notice applies.

2

What we collect, why, and for how long

The table below sets out each processing activity on this website: the data involved, the purpose and lawful basis under UK GDPR Article 6, and the retention period.

Activity Data collected Purpose and lawful basis Retention
Send a contact enquiry Name, practice details, email, phone, your message To respond and discuss your requirements. Basis: taking steps at your request before a contract, and our legitimate interest in answering enquiries. 2 years
Request a free website audit Name, practice, email, phone, website address To run the audit on your public website and email you the report. We never access private systems. Basis: taking steps at your request; marketing only with separate opt-in consent. 12 months
Join the new CMS waitlist Email address, which page you signed up from To tell you about our next-generation CMS before general release. Basis: consent, which you can withdraw with one click or email. 12 months
Arrive via a campaign link Campaign link parameters, landing page, browser type, referring page, a first-party session identifier. Never your IP address. To measure which marketing campaigns lead to enquiries, free website audit requests or calls (we record a phone-number click, not the call). Basis: our legitimate interest in measuring marketing. Never used to identify you. 12 months
Respond to a blog post Name, your response, optional email (never published) To review your response and, if selected, publish it with your name on the post. Responses pass an automated spam screen (Anthropic processes the response text and name only, never your email) before a person reviews every one. Basis: our legitimate interest in hosting reader discussion; email is used only to contact you about your response. Published: while the post is live. Not published: 30 days
Accept cookies in the banner Usage data via Google Analytics; ad conversion events via the OpenAI, LinkedIn and Microsoft advertising pixels To understand how the site is used, and to know whether our advertising leads to enquiries. Basis: consent via the cookie banner. Decline and none of them runs at all. See cookie policy
Become a customer Business contact details and communication history in our CRM To manage your account, provide support, and send relevant service updates. Basis: contract and legitimate interests; marketing per your preferences. Duration of relationship

You are never under a statutory or contractual obligation to give us personal data. If you choose not to, the only consequence is that we can’t respond to the request the data was for. Operational server logs are kept for 30 days for security and troubleshooting.

3

Cookies and analytics

We use a small number of essential cookies to make the site work (session, security, and your cookie choice itself) and, only if you accept them, measurement code from Google Analytics and the OpenAI, LinkedIn and Microsoft advertising pixels. Nothing measures you before you consent, and declining changes nothing about how the site works. The full list, with lifetimes, is in our cookie policy.

4

Who we share your information with

We never sell your data. We share it only with the service providers below, each under contracts that restrict what they may do with it and require appropriate security:

  • UK hosting providers

    Run the servers this website and its data live on. UK-based.

  • Microsoft 365

    Email and office tools. Your enquiry lands in our inbox here.

  • HubSpot

    Our customer relationship management system, where enquiries and customer records are managed.

  • Slack

    Our internal team messaging. New enquiries, audit requests, and waitlist signups notify the team here so we respond quickly.

  • Google Analytics

    Website usage statistics, only if you accept cookies in the banner.

  • OpenAI

    Conversion measurement for our advertising in ChatGPT: records that an enquiry followed an ad visit, only if you accept cookies in the banner.

  • LinkedIn and Microsoft (advertising)

    Conversion measurement for our advertising on LinkedIn and Bing: records that a visit or enquiry followed one of our ads, only if you accept cookies in the banner. See our cookie policy.

International transfers

Our own platform is UK-hosted. Some of the providers above may process data outside the UK (for example in the EU or the United States). Where that happens, the transfer is covered by UK adequacy regulations (which cover every country in the European Economic Area and, for US organisations participating in the UK Extension to the EU-US Data Privacy Framework, the United States) or by appropriate safeguards such as the UK International Data Transfer Agreement or International Data Transfer Addendum.

LinkedIn integration

When connecting a LinkedIn Page to our internal Tree View SEO Console, an authorised Page admin grants OAuth access via LinkedIn’s developer platform. We use this access solely to read aggregated post performance data (impressions, reactions, comments, shares) for the connected Page. We do not access member profile data, message content, or first-degree connections. OAuth tokens are stored encrypted at rest and transmitted only over HTTPS. Authorisation can be revoked at any time from your LinkedIn settings. The data ingested is used only for internal reporting on Tree View Designs’ own social-media performance and is not shared with third parties.

6

Your rights

UK data protection law gives you all of the following rights over your personal data. Exercising any of them is free: contact our Data Protection Lead via the contact form. We respond within one month of receiving your request and any identity information we need to confirm it is you, and we carry out reasonable and proportionate searches for the data you ask about.

1. Access

Ask whether we hold data about you, and get a copy of it.

2. Rectification

Have inaccurate or incomplete data corrected.

3. Erasure

Ask us to delete your data. We will, unless a legal duty requires us to keep it.

4. Restriction

Ask us to pause processing your data while a concern is resolved.

5. Portability

Receive the data you gave us in a usable format, or have it sent to another organisation.

6. Objection

Object to processing based on our legitimate interests, including any direct marketing, at any time.

7. Withdraw consent

Where processing is based on consent (like the waitlist or analytics cookies), withdraw it at any time. Withdrawal doesn't affect what happened before.

8. Complain

Raise a complaint with us using the contact form or by telephone. We acknowledge every data protection complaint within 30 days of receiving it and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office at any time.

The regulator: you can contact the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d welcome the chance to resolve any concern directly first, but you don’t have to give us one.

7

Profiling and automated decisions

We make no automated decisions about you and carry out no profiling. Every enquiry, audit request, and waitlist signup is read and handled by a person.

8

How we protect your information

  • Encrypted connections (HTTPS) across the entire site
  • Encrypted email and storage
  • Access limited to authorised staff who need it
  • Regular staff training on data protection
  • Cyber Essentials certification
  • Continuous in-house penetration testing
  • Incident reporting and improvement processes
  • Provider contracts requiring data protection

More detail on our security posture, accreditations, and infrastructure is on our security page.

9

Changes to this notice

When we change how we handle personal data, we update this notice and the date below before the change takes effect. Significant changes affecting existing customers are also communicated directly.

Last updated: 18 September 2026