Let’s Talk → My account

Privacy policy

Last updated: 26 October 2026

This explains how Eversloy Ltd uses personal information on eversloy.co.uk and in BEEKS at beeks.eversloy.co.uk when you enquire, create a free mockup account, choose a package or use an agreed service. For service commitments, see our Terms and Conditions.

1. Who we are

Eversloy Ltd is the controller of personal information used to operate this website and manage our own enquiries and client relationships. Company number: 15748654. Registered office: 28 Merstone Close, Bilston, Wolverhampton, WV14 0LR, United Kingdom. Contact Lee Savory at hello@eversloy.co.uk or write to the registered office marked “Privacy”.

This policy covers Eversloy’s technology-services business. Client websites and other businesses have their own notices. Where we process your customers’ information solely on your instructions, our responsibilities are set out in the relevant data-processing agreement.

2. Information we collect

  • Enquiries: your name, email, optional business name and phone number, service interest and message, provided by you through our form, email or conversation.

  • BEEKS mockup accounts and requests: your name, email, account credentials held securely, business details, answers and project brief, supplied content, concept images, feedback, selected plan and usage/reservation records. You can request generation yourself within the available limits; Lee can also assist. Free mockup accounts are separate from paid website/service access. Historical applications remain private records where still required; new BEEKS requests are not the retired WordPress application form.

  • Paid-service onboarding and workspaces: authorised account/business details, agreed briefs, website content, approvals, change requests, messages, handover information and service history. BEEKS manages the design/workspace side; Eversloy manages orders, billing and service administration. Only send information relevant to the work; do not put passwords, payment-card details or unnecessary sensitive personal information in project messages.

  • Orders, contracts and payments: billing/contact details, package and mockup references, proposals, agreements, invoices, payment status, transaction references and related correspondence. WooCommerce/WooPayments and their payment-processing providers handle checkout/payment data; payment information entered into their payment fields is processed by those providers. We do not ask you to send card numbers through project forms or email. Our own records hold the administrative/payment information needed to manage your order, rather than full card numbers.

  • Technical and usage records: IP/browser/request information used for security, essential login/preview/cart sessions, errors and email-delivery diagnostics. BEEKS records generation/request status, fixed diagnostic stages, queue/provider/total timings and usage needed to operate its limits. Eversloy receives bounded generation reports for support and owner reporting. The optional activity console shows only safe events permitted for the relevant visitor/account; a debug preference does not grant account access. Rate limits help protect signup, login and enquiry routes.

Information comes mainly from you or people authorised to act for your organisation, and from technical records created when the services are used. If someone introduces you, we may receive your business contact details and the reason for the introduction.

3. Purposes and lawful bases

  • Answering enquiries and discussing work: steps requested before a contract where you are the prospective contracting individual; otherwise our legitimate interest in responding to business enquiries and communicating with representatives.
  • Delivering services and managing accounts: performing our contract where you are the contracting individual; otherwise our legitimate interest in supplying and administering services for our business customers.
  • Website, account and email security: our legitimate interests in protecting users and systems, preventing misuse, investigating failures and keeping services reliable, balanced against individuals’ rights.
  • Financial, legal and complaint records: applicable legal obligations and our legitimate interests in appropriate business administration and establishing or defending claims.
  • Optional website analytics: consent where Google Analytics is enabled on the website. Google Search Console reports are used for our legitimate interest in understanding and improving search visibility.

Contact and project information is needed to respond to you or provide the service. If you do not supply the necessary information, we may be unable to proceed. Optional fields are marked. An enquiry or application is not agreement to unrelated marketing. If we introduce optional promotional mailings, we will explain the basis and provide a simple way to opt out; where consent is required, we will ask separately.

4. Service providers and sharing

We use hosting and backup providers to store and operate Eversloy and BEEKS, Google Workspace for business email/collaboration, and email-delivery services including CyberSMTP/CyberMail for Eversloy messages. These process the relevant account, content, address, message or delivery information needed for their role. Eversloy uses WordPress/WooCommerce for sales and service administration; BEEKS is a separate application for mockup/design and authorised workspace records. Server location does not mean that every provider processes information only in that country.

Signed connections between BEEKS and Eversloy exchange relevant account/business references, contact details, selected package, project brief and private concept image for the customer-requested handoff and service administration. BEEKS also supplies bounded request/status/timing reports for support and owner reporting. A matching email address alone does not grant paid website access.

WooPayments and its payment-processing providers, including Stripe where used, process billing, transaction, device and fraud-prevention information under their applicable roles and notices. Relevant banking and professional accounting providers process information needed for reconciliation and legal financial records. We do not use an enquiry or project message as a card collection form.

BEEKS and agreed website workflows use AI providers, including OpenAI where configured, for supported design/content operations. When you or Lee requests generation or an AI-supported operation, relevant business briefs, instructions, supplied content or images may be sent to that provider. This includes customer-triggered free concept generation; it is not limited to tools run manually by Lee. AI results need the appropriate review and do not by themselves approve a paid service or publish a website. Processing uses the contract or legitimate-interest basis described above as applicable. Please avoid unnecessary personal or sensitive information. AI is not used as a solely automated decision about whether to accept you as a customer.

Google Analytics, when enabled with consent, measures website use. Google Search Console provides search-performance and indexing information from Google. We do not add a visitor-tracking cookie simply by verifying the site in Search Console. The website loads Font Awesome icons from the cdnjs content-delivery network, which receives technical information such as the requesting IP address.

Information may also be shared with authorised technical providers needed for an agreed project, professional advisers, or authorities where legally required. We limit information shared to what is relevant. If a project needs an additional service to process personal information, its role and any necessary data-processing terms are addressed as part of that work.

5. Processing outside the UK

Hosting in one country does not mean all providers process information only there. Google, CyberPersons/CyberSMTP, OpenAI and payment providers can process information outside the UK under their applicable service arrangements. The providers, locations and safeguards relevant to an agreed service must be assessed for that service; we do not treat the location of our web server as a transfer safeguard.

Google describes its transfer arrangements, including the UK Extension to the EU–US Data Privacy Framework and contractual safeguards, in its data transfer information. The mechanism applicable to a particular service depends on its contract and processing arrangements. Contact us for details of the relevant providers, locations and available safeguards for your information. We review provider arrangements when assessing transfers; the location of our web server alone is not a transfer safeguard.

6. Retention

Our retention policy uses the periods below. Records are reviewed for deletion or anonymisation when their purpose ends. These are management periods, not a claim that every system deletes records automatically.

  • Enquiries, historical applications and free mockup accounts/requests that do not become paid services: normally 12 months after the last meaningful contact.
  • Core contracts, approvals, invoices and payment records: normally six years after the end of the relationship or relevant financial period, as appropriate to the record and applicable legal requirements.
  • Routine portal messages, working files and onboarding material: reviewed at the end of the service and normally removed within 12 months, except information needed for the core contract record, handover or an agreed continuing service.
  • Account access and credentials: reviewed promptly when access is no longer needed; project-specific handover and removal arrangements apply.
  • Operational logs and delivery diagnostics under our control: a normal review period of 90 days, with longer retention only for a specific security incident, unresolved issue or legal need. Providers may retain separate service records under their own applicable arrangements.
  • Backups: removed information may remain in protected backups until the applicable backup cycle expires. Backup retention depends on the service and recovery needs; backup data is not kept for ordinary ongoing use, and deletion requirements are reapplied if a backup is restored.

A legal duty, live dispute or security investigation may require relevant information to be kept longer. Records that become unnecessary sooner can be removed sooner. Cookie lifetimes and short-lived technical rate limits are separate from retention of the enquiry or application itself.

7. Cookies, analytics and your choices

Essential cookies support requested functions, including WordPress/WooCommerce account access, shopping baskets, BEEKS sessions and pre-launch preview access. The eversloy_preview cookie lasts seven days. WordPress authentication cookies maintain a login session; selecting “Remember me” extends it. WordPress may also use a test cookie and administrative preference cookies. Current account, signup and enquiry routes use appropriate validation and rate limits. The retired launch form and old portal are not the current BEEKS signup or client-login route.

WooCommerce uses cart cookies such as woocommerce_items_in_cart and woocommerce_cart_hash, normally for the browser session, and a wp_woocommerce_session_* cookie to associate a basket with its server-side session. The installed default session period is two days for signed-out visitors or seven days for signed-in customers, subject to expiry and session renewal. BEEKS uses the beeks_session browser-session cookie for relevant application/account requests. The optional first-party beeks_debug display preference lasts seven days when enabled with ?debug=true; ?debug=false clears it. It is not an authentication cookie and does not expand permissions.

Payment providers may use cookies or similar storage needed for authentication, fraud prevention and their payment interface. Their applicable notices explain those technologies. Non-essential Eversloy analytics still requires the separate choice described below.

On eversloy.co.uk, Google Analytics loads only if you choose “Accept analytics”. Choosing “Reject analytics” leaves it off without restricting ordinary use of the site. The “Cookie settings” button at the bottom of public pages lets you change your choice. Withdrawing consent stops this integration and removes its accessible Google Analytics cookies from this site; it does not undo data already lawfully collected.

Google Analytics measures page visits and may collect device/browser information, referral sources and interactions. We do not send enquiry text, contact details or portal information through this integration. Query strings and fragments are removed from the page and referrer addresses we supply. Google Signals and advertising personalisation are disabled in our tag configuration. Analytics is not loaded on client-portal pages or for signed-in users.

The eversloy_analytics_consent cookie remembers your choice for 180 days. If accepted, Google Analytics uses _ga and property-specific _ga_* identifiers; this integration configures a 180-day cookie lifetime without renewing it on every visit. The lifetime of browser cookies is separate from retention of information already sent to Google. Analytics reporting is subject to the Google property’s data-retention settings; contact us for the current setting. Aggregate reports can be retained separately from user-level data.

You can remove or block cookies in your browser, although this may prevent login or preview access from working. Google also provides an Analytics opt-out browser add-on. This does not replace the website’s obligation to provide the necessary choice. Following links to external sites brings their own privacy and cookie practices into play.

8. Your rights

Depending on the circumstances, you can ask for access, correction, erasure, restriction or portability of your personal information. Rights depend on the legal basis and relevant exceptions. Where we rely on consent, you may withdraw it at any time without affecting lawful use before withdrawal.

You have a right to object: you may object to processing based on legitimate interests for reasons relating to your situation. You may object to direct marketing at any time. Contact hello@eversloy.co.uk.

We may need proportionate information to check your identity. Requests are normally free, and we respond within the applicable legal timeframe, normally one month. We will explain any lawful extension, restriction or refusal.

9. Security, human review and complaints

We use access controls and other appropriate technical and organisational measures to protect information. No online service can guarantee absolute security. Tell us promptly about suspected account misuse or unintended disclosure.

Lee confirms paid-service suitability and activation. Free BEEKS account creation and bounded generation checks do not themselves approve a paid service. Automated validation and rate limits protect the routes; they do not make a solely automated decision to enter a paid client relationship. If a particular project involves significant automated decisions about individuals, that processing must be addressed separately before use.

Please contact Lee with any concern. You can also complain directly to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You do not have to contact us first.

10. Updates

We update this notice when our practices change and show the revision date above. Where a new use requires consent or direct notice, we address that before the new use begins.