A kitchen studio in Bristol paid a London freelancer £950 a month through GoCardless. Nothing in the email thread named a data processor. That became a GDPR problem the week a customer in Leeds asked for their showroom enquiry to be deleted. The website still said the showroom was in Manchester, because that city had been left in a template. Stripe deposits for design consultations were landing in the freelancer's account, not the studio's.
British firms leave local suppliers when the monthly collection is automated and the responsibilities are not. A familiar high street office does not answer a deletion request, a VAT inspection, or a handover.
The retainer that failed a deletion request
The agency alternative the studio had priced in Birmingham was £2,400 a month plus VAT and just as vague: "social and website support". No list of URLs. No record of processing. The Google Business Profile for the Bristol studio was verified on a staff phone that had since left the company. Glasgow was mentioned in a blog draft that was never published, which told the owner the content plan was a city list, not a sales plan.
Agency, freelancer, and a scoped studio
Regional agencies in London, Manchester, Birmingham, and Leeds often quote £1,500–£3,200 a month before 20% VAT. You get account meetings. You get a junior producing every channel. Specialists are booked out.
Freelancers at £650–£1,200 are sharp at one skill and fragile on custody. GoCardless keeps charging after the Slack thread goes quiet. If the ad account is in their email, you cannot pause it.
CrazzyCodes writes design, search, and media as separate lines, names the controller and processor for enquiry data, and leaves domain, analytics, and ad accounts with you. Compare that with UK web design, UK SEO, and a marketing scope finance can attach to a VAT invoice. Edinburgh and Liverpool firms ask the same custody questions as Bristol; the city changes, the file list does not.
Questions before you switch
- Who is the controller of form data, and where is the processor named?
- Can you export or delete a Leeds or London enquiry without asking a supplier?
- Does the VAT invoice describe pages and campaigns?
- Is GoCardless or the card mandate in the company name?
- Are London, Manchester, Birmingham, and Bristol pages different briefs?
- What transfers on the day the retainer ends?
What the estimate should bind
One page is enough: outcome, 90-day outputs, exclusions, login ownership, GDPR roles, VAT, and the fee. If a supplier will not sign that page, do not start a direct debit. Send CrazzyCodes the current mandate and the last report. We will show the gaps before quoting. You can stop later without losing the accounts.
Get an estimate you can file
Send the retainer and the last report. We will reply with scope, VAT, and who the data controller is.
Request a written estimate