Privacy policy
Last updated: 23 August 2026
1. Who we are
StartLocal is operated by Prism Hooldus OÜ, registry code 16894703, registered in Estonia (EU). We build and look after websites for UK small businesses. For anything in this policy, write to hello@getstartlocal.co.uk.
2. What we collect
When you send the contact form we receive your name, email address, company name (if you add one), the budget range you picked, your message, the page you wrote from and — if your browser recorded it — how you found us (for example "google / organic" or a campaign tag). The newsletter form collects your email address only. Both forms are protected by Cloudflare Turnstile, which checks that the sender is a person and not a bot.
3. How we use it
To reply to your enquiry, prepare a quote, deliver the service you ordered and send the newsletter you asked for. We do not sell your data and we do not share it with anyone for their marketing. Enquiries are stored on our own server in the EU and sent to us by email and messenger notification.
4. Legal basis
Consent — when you submit a form or subscribe. Contract — when you buy a website, a fix or a support plan and we process what is needed to deliver it. Legitimate interest — keeping the site secure and spam-free.
5. Cookies and storage
Essential: Cloudflare Turnstile sets what it needs to tell people from bots — this cannot be switched off, the forms would drown in spam without it. Preferences: your browser keeps your theme choice, your cookie decision and the first-touch source described above in local storage; none of it identifies you and none of it is sent anywhere until you yourself submit a form. Analytics: we use Google Analytics 4 only after you press "Accept analytics" in the cookie bar — until then Google Consent Mode keeps analytics storage switched off. You can change your mind by clearing this site's data in your browser; the bar will ask again.
6. How long we keep it
Enquiry data — up to 2 years, or less if you ask us to delete it. Customer and invoicing records — as long as accounting and tax law requires. Newsletter addresses — until you unsubscribe.
7. Your rights
Under UK GDPR you can ask to access, correct, delete or restrict what we hold about you, object to processing and take your data elsewhere. Email hello@getstartlocal.co.uk and we will act on it. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Where the data lives
Our own infrastructure runs in the EU. Two third parties touch data from this site: Google (analytics, only with your consent) and Cloudflare (bot protection). Both may process data outside the UK; where that happens we rely on adequacy decisions or standard contractual clauses.
9. Contact
Privacy questions go to hello@getstartlocal.co.uk. We answer within 5 working days.