Last updated: 31 March 2026
This privacy policy explains how Risa Medical, trading as NI Web Design ("we", "us", "our"), collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller is Risa Medical, trading as NI Web Design, registered at 10 Rushy Road, Ballyclare, Northern Ireland.
For any data-related queries, contact us at hello@niwebdesign.co.uk.
2. What Data We Collect
We may collect the following personal data through our contact forms, project intake forms, and email correspondence:
- Your name
- Email address
- Phone number
- Business name and details
- Website address (if applicable)
- Project requirements and preferences
- Payment information (processed securely via Stripe; we do not store card details)
3. Why We Collect It
We use your personal data for the following purposes:
- To respond to enquiries and provide quotations
- To deliver web design and development services
- To communicate with you about your project
- To process payments
- To comply with legal and tax obligations
4. Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries | Legitimate interest |
| Providing a quotation | Pre-contractual steps |
| Delivering services | Contract performance |
| Processing payments | Contract performance |
| Tax and accounting records | Legal obligation |
5. How We Store Your Data
Your data is stored securely on our servers and in our email systems. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or destruction.
We do not transfer your data outside the United Kingdom unless required by a third-party service (see below), in which case appropriate safeguards are in place.
6. Third Parties
We may share your data with the following third parties, solely for the purpose of providing our services:
- Stripe — for processing payments. Stripe's privacy policy is available at stripe.com/privacy.
- Google Fonts — our website uses Google Fonts, which may log your IP address. Google's privacy policy is available at policies.google.com/privacy.
We do not sell, rent, or trade your personal data to any third party.
7. Cookies and Tracking
This website does not currently use analytics cookies or tracking scripts. We do not use Google Analytics, Facebook Pixel, or any similar tracking tools.
If this changes in the future, we will update this policy and provide appropriate notice and consent mechanisms.
8. Data Retention
- Project data (contracts, invoices, project files): retained for 6 years after project completion, in line with HMRC record-keeping requirements.
- Enquiry data (contact form submissions from people who do not become clients): deleted after 12 months if no engagement.
- Email correspondence: retained for the duration of the business relationship and for 12 months after it ends, unless required for legal or accounting purposes.
9. Your Rights
Under the UK GDPR, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your data where there is no compelling reason to continue processing it.
- Right to data portability — request your data in a structured, commonly used format.
- Right to restrict processing — request that we limit how we use your data.
- Right to object — object to processing based on legitimate interest.
To exercise any of these rights, email us at hello@niwebdesign.co.uk. We will respond within 30 days.
10. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
11. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.
12. Contact
For any questions about this privacy policy or your personal data:
NI Web Design (trading name of Risa Medical)
10 Rushy Road, Ballyclare, Northern Ireland
Email: hello@niwebdesign.co.uk