GDPR Privacy Notice

1. Data controller

SSO Web Design is operated by SSO Digital Solutions (referred to as "SSO", "we", "us", or "our"), which acts as the data controller for personal data collected through this website and in providing our services.

To contact us about your personal data, use the contact details available on this website.

2. Personal data we collect

• Identification and contact details you provide through intake, quotes, or correspondence (name, email, phone, business name).
• Business and project information you share (current website, industry, location, requirements, content, and assets).
• Billing details necessary to process payments.
• Technical information such as IP address and basic server logs when you visit the site.

3. How we use your data

We process your personal data to respond to inquiries, prepare proposals, deliver design and development work, configure domains and hosting, send invoices, and operate and maintain your website.

We may also process data for legitimate interests such as security, fraud prevention, and service improvement, and to comply with legal obligations.

4. Legal basis for processing

• Performance of a contract or steps taken before a contract (your project and hosting).
• Consent you give, for example for optional marketing or non-essential cookies.
• Legitimate interests in operating secure, reliable services.
• Legal obligations, such as recordkeeping and tax requirements.

5. Sharing with processors

We share data only with processors that help us deliver services — for example hosting infrastructure providers (including Amazon S3 where applicable), domain registrars and DNS providers, and email service providers. Processors act on our instructions and are bound by appropriate agreements.

We do not sell your personal data.

6. International transfers

Your data may be processed in the United States, including SSO’s managed Arizona server environment. Where personal data is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Retention

We keep personal data only as long as necessary to deliver services and to meet legal, tax, or contractual obligations. Project and billing records may be retained after the relationship ends for those purposes.

8. Your rights

• Access, rectify, or erase your personal data.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing relies on it.
• Lodge a complaint with your local data protection authority.

9. Cookies

This website uses only essential cookies required to function. We do not use advertising or cross-site tracking cookies.

10. Security

We apply reasonable technical and organizational security measures, but no system is completely secure and we cannot guarantee absolute protection.

11. Children

Our services are not directed at individuals under 16, and we do not knowingly collect personal data from them.

12. Changes and contact

We may update this notice; material changes are reflected by the "Last updated" date. For any privacy question, contact us through this website.