Your website will probably collect personal data, such as names and emails from an enquiry form. Under UK GDPR (the UK's main data protection law), you must tell people what you collect, why, how long you keep it and who you share it with. The ICO, the UK's data protection regulator, says this information must be concise, clear and easy to find.
If your designer hosts the site or handles enquiry data for you, they are acting as a processor. The ICO says there must be a contract that covers how they handle that data, keep it secure and delete or return it at the end.
Cookies need care too. The ICO says you must explain what cookies do and get consent before setting non-essential ones, such as most advertising cookies. Simply carrying on browsing does not count as consent. Rules in this area have been changing, so ask the designer how their cookie banner works and check the ICO's latest guidance.
- Where will the website and form data be stored?
- Will you give me a data processing agreement as part of the contract?
- How will the cookie banner work, and which cookies will the site set?
- Will there be a short privacy note next to each form, with a link to the full privacy notice?