Last updated: 30 September 2026
Who we are
Starwell Consultancy (“we”, “us”) is a web design, branding and Salesforce consultancy run by Lyndsey Starkie and Chris Wellman. Starwell Consultancy is a partnership.
Address: 406 Barlow Rd, Broadheath, Altrincham WA14 5HZ
Email: lyndsey@starwellconsultancy.co.uk
Phone: 07930 959329
We are the “controller” for the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO), registration number PENDING.
This policy explains what personal data we collect through our website and when you work with us, why we collect it, and your rights. We follow the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
What we collect and why
When you contact us
When you fill in our contact form, we collect your name, email address, phone number, company, website and your message.
We use this to reply to you, discuss your requirements and, if you become a client, to deliver our services.
Your details go straight from our form into our Salesforce account, where we keep track of and follow up every lead. This is the same set-up we offer our clients.
Our lawful basis: legitimate interests (responding to people who contact us), or taking steps at your request before entering into a contract.
When you become a client
We keep contact details, project information, correspondence and billing details so we can deliver our services, invoice you and meet our legal and accounting obligations.
Our lawful basis: performance of a contract and legal obligation.
Marketing
We’ll only send you marketing emails, such as news or updates about our services, if you’ve agreed to receive them, or if you’re an existing client and we’re telling you about similar services. You can unsubscribe at any time using the link in any email, or by contacting us.
Our lawful basis: consent, or legitimate interests for existing clients.
Comments
If you leave a comment on our site, we collect the details in the comments form, plus your IP address and browser details to help detect spam. An anonymised string created from your email address (a “hash”) may be sent to the Gravatar service to check whether you have a profile picture. The Gravatar privacy policy is at automattic.com/privacy. Once your comment is approved, your comment and profile picture are visible to the public.
Spam protection
Our contact form uses Google reCAPTCHA to check that submissions come from a real person. reCAPTCHA collects information about your device and how you interact with the page, and sends it to Google. Google’s use of this information is covered by the Google Privacy Policy and Terms of Service.
Our lawful basis: legitimate interests (protecting our website and systems from spam and abuse).
Cookies
Our site uses a small number of cookies:
- Essential cookies that make the site work, including login cookies for site administrators
- Comment cookies: if you leave a comment, you can choose to save your name, email and website in cookies so you don’t have to type them again. These last one year.
- Google reCAPTCHA cookies on pages with our contact form
- Analytics cookies from Google Analytics help us understand how visitors use our site, for example which pages are most popular. They don’t identify you personally.
You can control or delete cookies in your browser settings. Blocking some cookies may stop parts of the site from working, such as the contact form.
Embedded content
Our contact page includes an embedded Google Map, and our pages link to our Facebook, Instagram, X (Twitter) and LinkedIn profiles. Embedded content behaves as if you had visited the other website. Google and the social media platforms may collect data about you, use cookies and track your interaction with that content, particularly if you’re logged in to their services.
Who we share your data with
We don’t sell your data. We share it only with trusted service providers who help us run our business:
| Provider | What they do for us |
| Salesforce | Stores contact form submissions and client records (our CRM) |
| reCAPTCHA spam protection and embedded maps and analytics | |
| Bluehost | Hosts our website |
| Automattic (Gravatar / Akismet) | Profile pictures and spam checks for comments |
| Gmail | Email services |
Each provider may only use your data to provide their service to us, and must keep it secure. We may also share data if the law requires it, for example with HMRC.
International transfers
Some of our providers, including Salesforce and Google, may process data outside the UK, including in the United States. Where this happens, we rely on the protections the law allows, such as the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement or an adequacy decision, so your data gets a level of protection that isn’t materially lower than in the UK.
How long we keep your data
- Contact form submissions: 2 years from our last contact with you, unless you become a client
- Client records: 6 years after our work together ends, to meet tax and accounting requirements
- Marketing preferences: until you unsubscribe, after which we keep a record so we don’t contact you again
- Comments: indefinitely, so follow-up comments can be approved automatically. You can ask us to remove them at any time.
Your rights
You have the right to:
- access the personal data we hold about you
- ask us to correct anything inaccurate
- ask us to delete your data
- object to or ask us to restrict how we use it
- withdraw consent at any time, where we rely on it
- ask for your data in a portable format
To use any of these rights, email lyndsey@starwellconsultancy.co.uk. We’ll respond within one month. If we need more information to deal with your request, we’ll let you know, and the one-month period will start once we receive it.
We don’t make any decisions about you based solely on automated processing.
How we protect your data
We use secure, reputable providers, keep our website and software up to date, and restrict access to personal data to Lyndsey and Chris. If a data breach is likely to put your rights at risk, we’ll report it to the ICO within 72 hours and tell you without undue delay where required.
Complaints
If you’re unhappy with how we’ve handled your personal data, please tell us first by emailing lyndsey@starwellconsultancy.co.uk. We’ll acknowledge your complaint within 30 days, look into it without undue delay and let you know the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: ico.org.uk | Phone: 0303 123 1113
Changes to this policy
We’ll update this policy when our practices or the law change. The date at the top shows when it was last updated.