Privacy Policy
Last updated 5 August 2026
1. Who we are
Murmur8 ("Murmur8", "we", "us", "our") is a web development and conversion rate optimisation consultancy operated by Paul Helyer, trading via murmur8.uk. We are the data controller for the personal data described in this policy.
Contact: hello@murmur8.uk
If you have any questions about this policy or how we handle your data, please get in touch using the details above.
2. What this policy covers
This policy explains how we collect, use, and protect personal data when you visit murmur8.uk, contact us, or use features on the site such as our chat widget. It does not cover services we build for third-party clients (for example, lead-capture tools or chatbots we develop for other businesses) - those are governed by that client's own privacy policy, since we act as a data processor on their behalf in those cases, not a controller.
3. Information we collect
We collect the following categories of personal data:
a) Information you give us directly
- Name, email address, phone number, and company name, when submitted via a contact form or enquiry
- Message content when you contact us or use the site chat widget
- Any other details you choose to share when discussing a project with us
b) Information collected automatically
- IP address, browser type and version, device type, operating system
- Pages visited, time spent on pages, referring URL, and general navigation patterns
- Approximate location (derived from IP address, at country/region level)
c) Cookies and similar technologies
See Section 7 below.
4. How we use your information
We use personal data for the following purposes:
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to enquiries and providing quotes | Legitimate interests / pre-contract steps |
| Delivering services under a contract | Performance of a contract |
| Improving the website and understanding how it's used | Legitimate interests |
| Sending updates about our services, if you've asked for these | Consent |
| Complying with legal and accounting obligations | Legal obligation |
We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.
5. Who we share information with
We may share personal data with:
- Service providers who support the running of the site or our business (e.g. hosting provider, email provider, analytics provider) - see Section 8
- Professional advisers (e.g. accountant), where necessary
- Law enforcement or regulators, where we're legally required to
We do not share your data with third parties for their own marketing purposes.
6. International transfers
Where any of our service providers store or process data outside the UK, we ensure appropriate safeguards are in place (such as the UK's International Data Transfer Addendum or an adequacy decision).
7. Cookies
murmur8.uk uses cookies and similar technologies for:
- Essential cookies - required for the site to function (e.g. security, load balancing). These don't require consent.
- Analytics cookies - help us understand how visitors use the site (e.g. Google Analytics). These require your consent, which you can give or withdraw via our cookie banner.
- Chat widget cookies/session storage - used to maintain your conversation with our chat widget during your visit.
You can control or delete cookies through your browser settings at any time. Blocking essential cookies may affect site functionality.
8. Third-party services we use
We currently use the following categories of third-party processors:
- Hosting: Hostek / Vercel
- Analytics: Google Analytics
- Email: Hostek
Each of these providers processes data under their own privacy and security terms, and we only share what's necessary for them to provide their service to us.
9. How long we keep your data
- Enquiry and contact form data: retained for up to 24 months after last contact, unless a client relationship continues
- Chat widget conversations: retained for 30 days unless the conversation results in an ongoing enquiry
- Analytics data: retained per our analytics provider's default retention settings, typically anonymised or deleted after 14–26 month]
We only keep personal data for as long as necessary for the purposes it was collected for, or as required by law.
10. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Request a portable copy of your data
- Withdraw consent at any time, where processing is based on consent
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we've mishandled your data
To exercise any of these rights, contact us at hello@murmur8.uk.
11. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including secure hosting, access controls, and encrypted connections (HTTPS).
12. Children
murmur8.uk is a business-to-business website and is not directed at children. We don't knowingly collect data from anyone under 16.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top will reflect the most recent revision. Significant changes will be highlighted on the site.
14. Contact us
If you have questions, concerns, or wish to exercise your rights, contact:
Paul Helyer / Murmur8
hello@murmur8.uk