Privacy policy.

Fourseven Media (“we”, “us”, “our”) is the data controller for personal data collected through this website. We are a web design and SEO agency based in Twickenham, Greater London.

• Trading name: Fourseven Media
• Registered office: 42 York Street, Twickenham TW1 3BW, United Kingdom
• Contact: hello@foursevenmedia.co.uk

We only collect what we actually need. There is no account system, no marketing automation, no chat widget, no embedded video or maps. The data points below are the complete list.

Contact form

When you submit the form at /contact we process:

• your name;
• your email address;
• your indicative budget (optional);
• the message you write to us;
• your IP address, captured automatically by our hosting provider and included in the resulting email so we can investigate spam.

The form also includes a hidden “company” honeypot field used solely to filter automated bot submissions; humans never see or fill it.

Geographic restriction on the contact form

By default, the contact form only accepts submissions from IP addresses geolocated to the United Kingdom. If you submit from outside the UK the request is rejected at the server. We do this to reduce inbound spam and because we work with UK-based clients. If you are outside the UK and want to reach us, email us directly at hello@foursevenmedia.co.uk.

Analytics and performance

If you consent via our cookie banner, we load Google Analytics 4 to measure how the site is used in aggregate (pages viewed, referrer, approximate location, device type). IP anonymisation is enabled. If you reject non-essential cookies, Google Analytics does not run.

We also use Vercel Analytics and Vercel Speed Insights to measure page load and performance. These tools are provided by our hosting platform and, per Vercel’s documentation, do not store cookies or persistent identifiers in your browser. They process limited request metadata (such as URL, referrer, and a short-lived hashed visitor identifier derived from request headers) to produce aggregate metrics.

Cookie consent state

When you make a choice in our cookie banner, we store that choice locally in your browser (using localStorage, key fourseven-cookie-consent-v1) so we don’t prompt you again. This is stored on your device only and is not transmitted to us.

Under Article 6 of the UK GDPR, we rely on the following bases:

• Legitimate interests — for handling enquiries you send us (so we can reply to you), for site security, and for spam prevention. We have assessed that this processing is proportionate and that you would reasonably expect it.
• Steps prior to entering a contract — where your enquiry concerns a potential project engagement, processing is also necessary to take steps at your request before any contract.
• Consent — for non-essential analytics cookies (Google Analytics). You give consent through the cookie banner and can withdraw it at any time by clearing the cookie banner choice in your browser’s storage and refreshing the page.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

We use a small set of carefully chosen processors:

• Vercel Inc. (United States) — hosts the website and runs the contact form’s server-side endpoint, and provides Vercel Analytics and Speed Insights.
• Resend (Resend, Inc.) (United States) — transactional email provider that delivers your contact form submission to our inbox.
• Google LLC (United States) — provides Google Analytics 4 (only loaded with your consent) and serves the website’s typeface via Google Fonts.

We do not sell personal data, and we do not share it with advertising networks, data brokers, or social media platforms. We do not use a CRM or marketing automation tool.

The processors above are based in the United States. Where personal data is transferred outside the UK, we rely on the UK extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement (IDTA), or equivalent safeguards approved under UK GDPR Article 46. You can request a copy of the relevant safeguards by emailing us.

• Contact form submissions live in our email inbox and at Resend. We delete them once the conversation is closed and there is no business reason to keep them, and in any event no later than 24 months after our last contact with you, unless we are required to retain them for accounting, tax, or legal reasons.
• Client project records (where you become a client) are retained for the duration of the engagement and for six years afterwards to meet UK accounting and limitation-period requirements.
• Google Analytics data uses Google’s default 14-month retention.
• Vercel Analytics and Speed Insights retain aggregate metrics for the period set by Vercel; we do not download or persist this data ourselves.

Under UK GDPR you have the right to:

• be informed about how we use your data (this policy);
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where one of the grounds in Article 17 applies;
• restrict processing in certain circumstances;
• object to processing carried out under legitimate interests;
• data portability where processing is based on consent or contract and is carried out by automated means;
• withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, email hello@foursevenmedia.co.uk. We will respond within one month. There is no charge unless your request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your personal data, please email us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

The website is served exclusively over HTTPS with HSTS enabled. The contact form is rate-limited and includes basic anti-bot measures. Access to our email inbox is protected by strong passwords and two-factor authentication. No method of transmission over the internet is perfectly secure, but we apply appropriate technical and organisational measures to the data we hold.

For full detail on what we store on your device and what choices you have, please see our Cookie Policy.

The website and our services are aimed at businesses and the adults who run them. We do not knowingly collect personal data from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

We update this policy when our practices change. The “last updated” date at the top of the page reflects the most recent revision. We won’t materially reduce your rights under this policy without telling you.

Questions about this policy or about how we handle your data: hello@foursevenmedia.co.uk.