Present your business correctly. Get the messaging right.
A website that works hard for you. Software that connects what happens next.
DESIGN WITH PURPOSE. TECHNOLOGY THAT CONNECTS.
FROM FIRST IMPRESSION TO THE WORK BEHIND IT
Three parts of one business. Select a stage to explore.
Architecture, interiors and considered advice.
From the first possibility to the finest detail.
One connected route. No lost handovers.
The right offer, clearly presented. Strong messaging, considered imagery and a look and feel that reflects your business. Clear navigation helps visitors find what matters, while well-placed prompts make it obvious what to do next—and easy to take that step.
Make it easy to connect, whichever route your customer prefers.
Understand the enquiry, capture the context and hand over to your team.
Human or AI-assisted inbound calls, with details and next steps recorded.
Captured. Assigned. Ready to progress.
Find the people, documents and history behind the work.
ASK. REVIEW. DECIDE.A purpose behind every pixel
Your website should earn attention, establish credibility and turn interest into enquiries. The right words, strong design and a clear customer journey give it commercial purpose.
If your website doesn’t talk to your management systems, it isn’t working hard enough for you. Connect the enquiry to the people, information and next steps that turn interest into business.
Make an impression. Create opportunity. Follow through.
01 / ATTRACTBusiness websites, online shops and landing pages.Expertly designed around your message,your audience and commercial priorities.
Websites & online experiences
02 / CONVERTFunnels, bookings, applications and follow-up.A clear customer journey from the first visitto an enquiry, booking or commercial decision.
Funnels & customer journeys
03 / CONNECTCRM, portals, tailored software and practical AI.Connect your people, information and activityto support the sale and everything that follows.
Software & practical AIFrom thinking to working
GSS Advisory brings commercial judgement to your discovery call. WolfIntel demonstrates the depth of our software and systems capability.GSS Studio draws on that experience to deliver focused services with clearly defined scopes. The full WolfIntel CRM is a separate offering.
Start with the part that matters
Creative problem-solving.
Over thirty years of practical experience.
Hands-on implementation.
Create. Refresh. Rebuild.
A focused website that presents you correctly, gets the messaging right and explains your offer. Expert design that builds confidence and makes it easy to get in touch.
Clear scope. Tangible deliverables.
Commission the website on its own. Add connected systems when they serve your business.
A confident first step
A clear, credible presence with the right messaging, professionally written content, visual impact and a straightforward route to enquiry. This is a starter package, but the website can be developed to the scale and complexity needed to achieve your objectives.
£750 deposit.
£899 on completion.
The connected starting point
Your website attracts the enquiry. Your CRM helps you manage the opportunity.Keep contacts, enquiries, tasks and follow-ups together, so you always know what needs attention.
£1,250 deposit.
£1,249 on completion.
Built around your requirements
Tell us what you want to achieve. We'll establish the requirements, recommend a practical solution and agree the specification and price before development begins.
Every business is different. Your final specification, included services, payment arrangements and any additional requirements will be clearly detailed in your individual proposal and service agreement before you commit. Any subsequent changes will be agreed and priced in advance.
You don't need to understand web design, software or the technical process. We establish what your business needs, agree the scope and price, and manage the work through to launch.
An initial 60-minute discovery conversation, extended as needed, with further calls or video meetings whenever useful.
We confirm what is included, identify additional requirements and agree the specification, total cost and delivery arrangements.
We manage design, development, technical configuration and testing, with agreed customer approval stages.
We launch your website or system, provide the agreed handover and make ongoing support available.
Your business data remains yours. Following full payment, you receive the agreed website and custom-code deliverables, with independent rights to operate, host, maintain and modify your delivered CRM installation. Host with GSS Studio or arrange your own hosting.
Possible Ltd retains its standard CRM product, reusable frameworks, pre-existing components and development know-how. Third-party licences apply. Your agreement defines the precise deliverables and rights.
Ongoing help, when you need it
Your business doesn't stand still, and neither should your website. Whether it's a simple update, fresh content or new functionality, we're here to help. We can tailor a package to what you need, when you need it—from occasional help to regular support. The options below are a guide.
Optional services, separate from hosting, security and maintenance. Unused hours do not carry forward. Cancel monthly plans with 30 days’ written notice, subject to any agreed minimum term. All additional work and expenditure require prior approval; contractual hosting fault correction does not use your purchased allowance.
Every click has a purpose
A visitor may just want to research you, or needs to book, enquire, apply or buy. The right journey depends on the business and how hard you want your website to work for you.
Bring the pages, forms, messages and follow-up together. Make it clear what to do, and make sure the business is ready to react when they do it.
Connect what happens nextThe practical details
Clear responsibilities and an agreed scope before work begins.
Mon–Fri, 09:00–17:00 UK time.
Initial response target: one working day.
08:00–23:00 UK time, every day. Recovery continues beyond the window when needed once intervention begins.
Managed monitoring, maintenance and scheduled backups. Coverage and recovery defined in your agreement.
Standard hosting: three-month minimum. Dedicated VPS: 12 months. Thereafter, 30 days’ written cancellation notice.
Standard managed hosting has a three-month minimum initial term, then continues monthly. Cancellation requires 30 days’ written notice. Any different or longer commitment is expressly agreed in your quotation. Outstanding development payments remain payable independently.
Monday–Friday, 09:00–17:00 UK local time, excluding applicable UK bank holidays. Initial response target: within one working day.
Hosting faults, maintenance assistance and infrastructure queries are covered. Content changes, training, migrations, new features and development are quoted separately unless your management package includes them.
08:00–23:00 UK local time, seven days a week, including weekends and bank holidays. UK local time means GMT or BST, as applicable.
Critical incidents reported or detected within this window are promptly acknowledged and assessed, with intervention beginning without unnecessary delay. Once intervention starts, it continues beyond 23:00 where needed until service is restored or an appropriate temporary solution is in place. Recovery remains subject to circumstances outside our control. Customers receive updates during material interruptions.
Incidents first detected outside the window are recorded for assessment from 08:00, unless separate emergency arrangements apply.
Critical incidents include complete server failure, a wholly unavailable website or CRM, serious confirmed security incidents requiring containment, and significant infrastructure failures affecting availability or customer-data integrity. Minor faults, content changes and routine requests use standard support.
Choose managed hosting or arrange your own. Domain registration, paid services, migrations, bespoke integrations, AI web chats and inbound voice agents are identified separately in your proposal. Read the service terms.
Understanding your business comes first. Every project begins with an initial discovery conversation, typically scheduled for 60 minutes. We'll take the time necessary to understand your business, objectives and requirements, arranging further discussions whenever needed.
From there, we'll establish a clear specification, identify any additional requirements and agree the scope and price before work begins. We consider your audience, existing presence and materials, functionality, design, content, integrations and third-party services. Further telephone calls or video meetings are arranged whenever appropriate.
Yes. We first establish what works, where it falls short and whether targeted improvement or a rebuild is the better starting point. You may host the website, or we can for you and dedicate a virtual private server for you.
You supply accurate business information, approved claims, existing materials, logo or current look and feel if any, plus an idea of direction. No matter how much or how little you can give, I'll analyse this to help with messaging and positioning; we sign that off. The base package includes shaping this into page messaging. Extensive copywriting, photography and specialist content are quoted separately.
Page titles and descriptions, sensible headings, crawlable navigation, a sitemap and Google Search Console setup and sitemap submission, subject to access. Submission does not guarantee indexing or search rankings. Ongoing SEO campaigns are scoped separately.
Choose Website Hosting & Care at £19.99 per month, or combined Website + CRM Hosting & Care at £59.99 per month. The first month following launch is included. A managed dedicated VPS starts from £100 per month, subject to specification. Hosting and support are separate from the development price; the service schedule defines backups, recovery and support. You may also arrange independent hosting.
Yes. A dedicated virtual private server can be implemented and managed from £100 per month, subject to the required resources and support. It is a virtual environment rather than a physically dedicated server. The quotation confirms the specification, security, backups, maintenance and any additional costs. A 12-month minimum applies, then 30 days’ written cancellation notice.
You own your business data. After full payment, you receive the agreed website and custom-code deliverables and independent rights to operate, host, maintain and modify your delivered CRM instance. Possible Ltd retains the standard CRM product, reusable framework and pre-existing components. Third-party components remain subject to their own licences. You can host independently or continue with our managed service. The written agreement sets out the code, licences and handover.
A standard, deliberately focused system for customer, business and supplier records, website enquiry capture, a simple pipeline, notes, interaction history, tasks and follow-ups. It includes standard setup, a walkthrough and access for up to three users.
You receive a separately deployed instance with its own database, logically isolated from other customers, its own accounts and permissions, and your configured business details. It is a starting system, not an enterprise platform. Additional features, fields, reports, workflows, integrations, AI and user-management changes are scoped separately.
Your CRM data belongs to you. GSS Studio has no routine access to view or use customer records. Technical administration, backups and recovery may require restricted infrastructure access. Any support access to customer information must be appropriately authorised, limited, controlled and documented. The Data Processing Agreement defines these responsibilities.
The Business Website is £1,649 paid in full, or £1,999 by instalments with a minimum initial payment of £750. Website + Starter CRM is £2,499 paid in full, or £2,999 by instalments with a minimum initial payment of £1,250. Any remaining balance is payable over no more than nine months.
Instalments are agreed in the individual customer agreement. The actual initial payment, payment dates and amounts must be agreed in writing before commencement. Tailored development is quoted separately, with payment stages by agreement. No VAT is currently added.
From a focused three-page website to a more substantial build, each offer is shaped around what you need now, with room to add functionality as your business develops. Scope and pricing are agreed upfront, so you stay in control of the budget, with no hidden costs.
Connect the business behind the website
Help your business work better, faster and smarter. Connect customer information, keep your team connected and informed, and help everyone work quickly and efficiently. Give every next step a clear owner and put AI to work where it earns its place.
Improve your existing systems, connect them or build something tailored.
THE STARTING POINT
From your website, a campaign or an existing customer.
THE RIGHT CONTEXT
The person, the requirement and the relevant history.
A CLEAR RESPONSIBILITY
A next action, a follow-up and visibility for the team.
A PRACTICAL ADVANTAGE
Less searching. Better continuity. A clearer view, always in control.
One requirement or the wider picture
Each service can stand alone or form part of a connected solution.
A standard Starter CRM gives you records, enquiry capture, a simple pipeline and follow-ups for up to three users. Your own instance and isolated database, with separately scoped development when you need more.
Give customers or your team a place to access information, submit requests and manage work around their actual needs.
Connect suitable existing systems. Reduce repeated entry and carry information between agreed stages of the work.
Help your team find knowledge, process documents or respond to routine requests. Define the task, test the approach and retain appropriate human review.
A clear job to do
What takes too long? Where is information hard to find? Which repetitive tasks hold people back?
AI has become the new buzzword. We can help you understand the problem, then choose, evaluate and integrate the right tools—in your business, online or within your CRM. Subscriptions, usage costs and limitations are made clear in the scope.
Experience taken through to delivery
WolfIntel is the more developed business management and intelligence system I built around my own demanding requirements. It connects people, relationships, activity, documents and AI-assisted insight in one working environment.
The website and standard Starter CRM bundle offers a focused starting point with its own installation and database. For businesses needing greater depth, WolfIntel shows how a more comprehensive, tailored system can develop. Additional capability is scoped and quoted separately.
Explore WolfIntel ↗Start with the friction
BRANDING & DESIGN
Start with a blank page or develop the brand you already have.
A clear identity and a considered visual language, carried consistently into your website and the materials around it.
A RECOGNISABLE BUSINESS
You may have a name and little else. A logo that no longer reflects the business. Or a well-established brand that needs to work better online.
The starting point is understanding what your business stands for, who it needs to reach and how it should be presented.
Build on what is right. Develop what is missing.Considered from every perspective.
Clear thinking. Considered design.
A different perspective.
MORE THAN A LOGO
Identity, colour, typography, imagery and messaging should work together. The website becomes a clear expression of that thinking.
Whether the task is a fresh identity or a careful evolution, the result needs to be usable and consistent.
Clarify the audience, offer, positioning and tone. Establish how the business needs to be understood.
Create or refine the logo, colour palette, typography and visual direction around the agreed brief.
Carry the identity into your website, presentations, digital materials and practical brand guidance.
Available as a separate assignment or alongside a new or updated website. Deliverables and fees are agreed around your starting point.
PRESENT THE BUSINESS PROPERLY
Possible Ltd · GSS Studio
Website development, Starter CRM, hosting and optional managed services.
GSS Studio is the service brand of Possible Ltd, registered in the Isle of Man, company number 134381C. Registered address: Creg-NY-Shee, 3 Lucerne Court, Douglas, Isle of Man, IM2 6BJ. Possible Ltd enters into commercial contracts and issues invoices. Contact: garry@possibleltd.com.
A discovery conversation establishes what the work needs to achieve. Before work begins, the written proposal identifies the package, deliverables, exclusions, total price, payment method, responsibilities, approval stages and intended timescale. Development, installation, testing and launch are coordinated by GSS Studio within that scope. A signed order and any applicable service and data-processing schedules form part of the agreement. Specific agreed terms take priority over these general terms, subject to mandatory law.
Discovery is initially scheduled for 60 minutes, extended where necessary, with further telephone or video discussions when appropriate. We establish the business objectives, audience, existing materials, functionality, design, content, integrations and requirements beyond a standard package. Written specification approval, recorded feedback and clear confirmation of changes form the initial operating process.
Business Website: £1,649 when paid in full, or a total instalment purchase price of £1,999. Paying in full saves £350. Website + Starter CRM: £2,499 when paid in full, or a total instalment purchase price of £2,999. Paying in full saves £500. Tailored Development is quoted individually, with payment stages by agreement. Recurring hosting and care charges are separate. Domain registration, paid services, migration, bespoke integrations and AI or voice usage are itemised in the proposal. Possible Ltd is currently not VAT registered, so no additional VAT is included or added to these advertised prices. VAT will be charged only where legally required, with any applicable tax treatment disclosed before a new order is accepted. These services are not described as VAT-exempt or zero-rated.
Business Website requires an initial payment of at least £750 against the £1,999 instalment total. Website + Starter CRM requires at least £1,250 initially against the £2,999 instalment total. In each case, the remaining balance must be payable over no more than nine months. The actual deposit, instalment amounts, due dates, final date and any treatment of early settlement must be agreed in writing before commencement. The individual customer agreement records the applicable instalment arrangements for the customer type and territory. The agreed instalment balance does not accrue additional interest. The pay-in-full and instalment totals differ as shown; this does not determine the legal or regulatory classification of the arrangement. No payment arrangement is activated by viewing this website.
You provide accurate business information, lawful materials and permissions for content, logos and other supplied assets. The Business Website includes discovery, positioning, page structure and messaging, design individually prepared for your business for up to three pages, responsive layouts, enquiry form and domain connection, standard SEO and Google submission, two revision rounds and handover. Extensive copywriting, photography and specialist content are quoted separately. You approve positioning and messaging before it is carried through into the pages. Agreed approval stages and acceptance checks are recorded in the proposal. Changes outside the agreed scope are priced and approved before additional work proceeds. Priority delivery is available by agreement, subject to capacity and an agreed schedule; no delivery date is guaranteed without written agreement. No additional work, expenditure or scope change is authorised without recorded customer approval.
Approved optional rates: Pay As You Go £65 per hour for occasional website or system amendments; Monthly Content Assistance £49 per month for up to one hour of minor website content changes; Monthly Development Assistance £149 per month for up to three hours of agreed website or CRM improvements and technical development. These optional services are additional to hosting and do not replace security monitoring or technical maintenance.
Pay As You Go scope, estimate, billing increments and minimum charge must be disclosed and agreed before work starts. Monthly allowances expire at the end of the agreed monthly service period and do not carry forward. Time recording, commencement, billing dates and any minimum subscription term for the optional plans must be agreed in the order before activation. Monthly optional plans may be cancelled with 30 days’ written notice, subject to any agreed minimum term; the hosting minimum term does not automatically apply to these plans. Additional work, larger projects, complex integrations and significant new functionality require a separate quotation and approval. Fault correction that Possible Ltd is contractually responsible for under its hosting arrangements must not be deducted from a purchased content or development allowance.
The Starter CRM is a standard product developed by GSS Studio, deliberately limited to practical essentials. The bundle includes customer, business and supplier records; integrated website enquiry capture; a simple sales or enquiry pipeline; notes and interaction history; tasks and follow-up management; up to three team users; and standard installation, configuration and walkthrough. Each customer receives a separately deployed CRM instance, a dedicated CRM database logically isolated from other customers, individual accounts and permissions, and configured business details. It is not a shared customer-data database or a complete enterprise platform. Additional features, reporting, data fields, workflows, integrations, automation, AI and user management are separate assignments with agreed scope and fees.
Your business data remains yours. On full payment for the relevant deliverables, you receive the agreed website and delivered custom-code rights set out in the order. Your CRM licence permits independent operation, hosting, maintenance and modification of your delivered instance without a requirement to keep hosting with Possible Ltd. Possible Ltd retains ownership of its standard underlying CRM product, reusable framework, pre-existing components and general know-how unless a separate written agreement expressly transfers them. Delivery of code is not a transfer of the reusable product itself. Third-party software, fonts, imagery, services and open-source components retain their own licence terms, which must be identified in the handover. The order must specify the delivered code, licence scope and any limits on redistribution. Client-supplied intellectual property is not transferred to Possible Ltd.
Website Hosting & Care is £19.99 per month, with the first month following launch included. The standard scope covers website hosting, SSL certificate management, routine security monitoring, applicable system maintenance and updates, scheduled backups and technical assistance for hosting-related faults. Content alterations, additional functionality, redesigns and extensive support are excluded unless agreed separately. The written service schedule defines support allowances, backup frequency and retention, recovery arrangements and service dependencies. No unlimited support or uninterrupted availability is promised.
All standard managed hosting arrangements have a minimum initial term of three months, including the free first month following launch, and continue monthly thereafter. Cancellation requires 30 days’ notice in writing. Any longer minimum commitment or different cancellation arrangement must be expressly agreed in the customer quotation. Hosting cancellation does not cancel any agreed outstanding development payments.
Monday–Friday, 09:00–17:00 UK local time, excluding applicable UK bank holidays. The initial response target is within one working day. Routine hosting fault investigation, maintenance-related technical assistance and hosting or infrastructure queries are included. Customer-requested content changes, training, migration, new features and additional development are charged separately unless included within an agreed management package.
Critical incident coverage is 08:00–23:00 UK local time, seven days per week, including weekends and bank holidays. UK local time means GMT or BST, as applicable. Incidents detected or reported during this period are promptly acknowledged and assessed. Technical intervention begins without unnecessary delay. Once intervention starts, incident management continues beyond 23:00 where necessary until service is restored or an appropriate temporary solution is implemented. Recovery remains subject to circumstances outside our control. Customers receive updates during material service interruptions.
Incidents first detected outside this window are recorded for assessment when coverage resumes at 08:00, unless separate emergency arrangements apply. Critical incidents include complete hosting server failure, a website or CRM becoming wholly unavailable, serious confirmed security incidents requiring immediate containment, and significant infrastructure failures affecting availability or customer-data integrity. Minor technical faults, content changes and routine requests do not qualify.
Individual website or CRM failure: target restoration within one working day of incident confirmation. Complete server failure: target restoration within two working days of incident confirmation, subject to hosting-provider availability. Target recovery point: no more than 24 hours, based on the latest successful recoverable backup. These are targets, not unconditional guarantees.
The signed service schedule defines backup coverage, retention, recovery arrangements, exclusions, responsibilities and service dependencies. Thirty days of backup history is not a retention policy for enquiry, contract or CRM records.
Standard Website Hosting & Care (£19.99/month) and Website + CRM Hosting & Care (£59.99/month) have a three-month minimum. The free first month following launch counts towards that term. Thereafter, continuation is monthly with 30 days’ written cancellation notice. Dedicated managed VPS hosting starts from £100/month, with a 12-month minimum, then continuation unless cancelled with 30 days’ written notice. A free first month is not included for VPS contracts unless separately agreed.
Data retrieval: 30 days after termination to retrieve customer data, with one standard export included, subject to final contractual arrangements. Export format, deletion and backup expiry remain to be agreed in the data schedule.
The combined service is £59.99 per month, with the first month following launch included. It includes the standard website care scope plus CRM application and database hosting, routine infrastructure and security monitoring, applicable security updates and maintenance, scheduled website and CRM backups, technical monitoring and reasonable assistance for hosting-related issues. Bespoke development, new features, data entry, customer administration and unlimited support are excluded. The service schedule defines the support allowance, backup frequency, retention, restoration process and recovery objectives. Backups and monitoring are safeguards, not a guarantee against every loss or security incident.
The standard minimum term, cancellation notice and support arrangements in section 8 also apply to this combined service.
Managed dedicated VPS hosting starts from £100 per month. The final price and scope depend on the required resources, storage, software, operating system, security and management requirements. A dedicated VPS is a virtual private server, not a physically dedicated server. Server specifications and costs must be assessed and confirmed in the customer quotation; the £100 starting point is not an unconditional fixed price. Any independent hosting or client-owned VPS management arrangement is documented separately. A bespoke VPS quotation states whether it replaces the standard care package or includes additional charges, so overlapping costs are clear.
A dedicated managed VPS has a minimum contractual period of 12 months. Thereafter it continues unless terminated with 30 days’ written notice. The standard hosting free-first-month offer does not apply unless separately agreed. The individual agreement confirms the final resources, provider costs, inclusions and contractual dates.
You control your CRM business records. GSS Studio does not routinely view, use or repurpose those records. Technical administration, maintenance, backups, incident response or recovery may provide infrastructure-level access. Access follows least privilege and is restricted to authorised purposes. Where support requires access to customer information, that access must be appropriately authorised, controlled and documented. Before personal data is processed on your behalf, the parties must complete the applicable Data Processing Agreement and security schedule. These identify controller and processor roles, processing instructions, data categories, duration, confidentiality, security controls, authorised subprocessors and locations, transfer safeguards, assistance with rights requests and incidents, audit arrangements and return or deletion. These terms do not claim that the hosting provider has no technical ability to access hosted data.
Where Possible Ltd processes personal data on a customer’s behalf, the separate GSS Studio — Data Processing Agreement and completed customer-specific schedule apply once agreed. Hosting, support and recovery arrangements are recorded in the Service Schedule. The individual agreement defines the applicable services and responsibilities.
This process applies to website and CRM hosting and maintenance, dedicated VPS management and outstanding development instalments. If payment is not received by its agreed due date, we notify you of the outstanding balance. A formal written reminder then allows 14 calendar days to pay or agree an acceptable resolution. If the amount remains unresolved after that period, a final written warning gives five further calendar days before relevant services may be suspended. Notice delivery details and the calculation of notice periods must be agreed in the contract. A dispute should be raised promptly so it can be investigated; an agreed resolution or revised schedule will be documented.
After the notice process, Possible Ltd may suspend affected services only in accordance with the contract, applicable law and agreed safeguards. Where practical, suspension is proportionate to the overdue service and does not unnecessarily affect unrelated, fully paid services. Withholding undelivered development work is distinguished from suspending an already operational hosted system. Instalment default does not create a right to disable an independently hosted, delivered system. Suspension is not automatic deletion of websites, systems or data. Data is preserved for the retention period agreed in advance, subject to law and technical arrangements, with an appropriate opportunity for retrieval. Access to client data must not be used as an improper debt-enforcement measure. To reinstate services, contact us and pay the overdue amount or agree a written resolution; restoration is then arranged within an agreed, technically feasible timescale. Any reinstatement charge must have been disclosed and agreed, rather than imposed without notice.
You may arrange independent hosting or continue with a managed service. After the applicable payment and delivery conditions are met, the agreed handover includes the delivered code, licence information, configuration guidance and relevant access or export information. You can commission a competent third party to maintain or modify your delivered instance under the agreed licence. Migration assistance and new infrastructure work are scoped separately, with any charges agreed in advance. We identify dependencies and third-party accounts that need transferring or replacing. Moving hosting does not itself cancel outstanding development payments.
Standard hosting has a three-month minimum, including the free first month; dedicated managed VPS hosting has a 12-month minimum. Thereafter, cancellation requires 30 days’ written notice, as set out in sections 8 and 10. Any expressly agreed variation, work-in-progress charges and termination rights are recorded in the order and service schedule before the service starts. On exit, we arrange return or export of customer data and agreed deliverables, subject to applicable legal obligations. The schedule sets the export format, retrieval window, retention period, backup expiry and deletion procedure. At the customer's choice, personal data processed on their behalf is returned or securely deleted, with copies removed unless retention is legally required; any backup deletion cycle and restrictions on further use must be defined. Data is not deleted simply because a bill is overdue. Client data return is kept distinct from any disputed rights to undelivered or unpaid development work.
The customer data-retrieval period is 30 days following service termination, with one standard export included, subject to the individual agreement and applicable law. The agreed data schedule must confirm export format, access arrangements, retention, backup expiry and deletion before service starts. Customer-owned records remain distinct from reusable software and intellectual property.
Possible Ltd shall perform its contracted services with reasonable care and skill, applying appropriate professional practices and technical standards. We shall use all reasonable endeavours to meet agreed service objectives and to investigate and resolve faults within the applicable support arrangements.
The Customer acknowledges that websites, software, telecommunications and hosting services depend upon technologies and third-party infrastructure that cannot be guaranteed to operate without interruption or error. Possible Ltd does not guarantee uninterrupted availability, absolute security, compatibility with every third-party system or any particular commercial outcome. Recovery objectives in the service schedule are targets rather than unconditional guarantees.
Our responsibilities and applicable exclusions are set out in the individual service agreement, subject to the liability limit below and mandatory legal protections. Third-party involvement does not automatically remove Possible Ltd's own contractual responsibilities. Nothing in the agreement shall exclude or restrict liability or customer remedies where such exclusion or restriction is prohibited by applicable law.
Subject to liabilities that cannot lawfully be excluded or limited, Possible Ltd's aggregate contractual liability arising out of or in connection with the relevant website or CRM system under the applicable agreement is limited to the total amount actually paid by the Customer for that system under that agreement. Amounts paid for unrelated purchases or services do not form part of this limit. Mandatory statutory rights and liabilities remain unaffected.
Please raise service or billing concerns with Possible Ltd using the contact details in the order, so we can investigate and seek a practical resolution. The agreement is governed by Isle of Man law, subject to applicable mandatory protections; the dispute forum is to be confirmed in the final contract. Mandatory protections and jurisdiction rights that apply to the relevant customer or territory remain unaffected.
Possible Ltd · GSS Studio
GSS Studio Privacy Policy
GSS Studio is a service brand of Possible Ltd, company number 134381C, Creg-NY-Shee, 3 Lucerne Court, Douglas, Isle of Man, IM2 6BJ. Contact: garry@possibleltd.com. Possible Ltd is the controller for its own enquiries, customer relationships and service administration. Where it hosts or supports a customer's CRM on that customer's instructions, its processor role and responsibilities must be documented in a Data Processing Agreement. The customer remains responsible for its own CRM privacy notices and lawful processing.
The information relevant to our services includes your name, business details, email address, telephone number, service enquiries, preferred appointment details, project requirements, correspondence, proposals, contracts, billing information, project documents and approvals, and necessary technical or security logs. The actual information collected depends on the services requested. Do not send unnecessary sensitive personal information.
We use relevant information to respond to enquiries, arrange discovery conversations, prepare proposals, deliver contracted services, manage customer relationships, administer billing and contracts, maintain service security, investigate faults and meet applicable legal obligations.
Customer CRM records are controlled by the customer and held in a separately deployed system with a logically isolated database under the agreed service. GSS Studio does not routinely inspect, use or repurpose those records. Restricted technical access may be necessary for authorised maintenance, security, support, backup or recovery, under the applicable Data Processing Agreement and security schedule.
The enquiry form requests a preferred discovery time, which awaits Garry's personal confirmation. An initial meeting is scheduled for 60 minutes and extended as needed.
Lawful grounds: steps requested before a contract and performance of a contract where the individual is a party; legitimate interests in responding to business contacts, managing customer relationships and securing services where appropriate; legal obligations where a specific duty applies; consent where required for optional processing. Contract necessity does not automatically cover every employee of a corporate customer.
Enquiries are voluntary. If information needed to scope or perform a service is not supplied, we may be unable to prepare an accurate proposal or deliver it. Required and optional fields must be identified before collection.
| Activity | Lawful basis |
|---|---|
| Enquiries, discovery and proposals | Requested pre-contract steps where the individual would be a contracting party; otherwise legitimate interests in responding to business contacts and assessing requirements. |
| Service delivery and customer communication | Contract performance for individual contracting customers; legitimate interests in administering corporate-customer relationships. |
| Billing and contract administration | Contract performance where applicable; legitimate interests in administration; legal obligation for records a specific law requires. |
| Security and fault investigation | Legitimate interests in protecting services and resolving faults; any specifically applicable legal obligation. |
| Customer-controlled CRM data | The customer determines its lawful grounds; Possible Ltd processes on documented instructions under the agreed DPA. |
Marketing: an enquiry does not subscribe you to marketing. Future marketing must meet the applicable consent or legitimate-interest requirements and provide the required opt-out. No preselected marketing checkbox is used. Routine business enquiries do not rely on blanket consent.
Our service-provider policy is to work with established professional businesses supporting hosting, communications, backups, security and related operations. We prefer reputable providers offering UK-based data-centre facilities. Personal information is shared only where necessary for legitimate business purposes, contracted services or legal obligations.
This preference is not a guarantee that all information remains exclusively in the United Kingdom. Any international processing or access must meet applicable data-protection requirements and transfer safeguards. Required provider identities, approval and access locations belong in the customer-specific subprocessor schedule.
Retention policy. Applicable duties, justified legal holds or a documented service-specific requirement may affect these periods. Retain only what is necessary and record the reason for any exception.
| Information | Retention |
|---|---|
| Unsuccessful enquiries | 12 months after last meaningful contact |
| Unsuccessful proposals | 12 months after last activity |
| Contracts and accounting records | Ordinarily 6 years, subject to legal requirements |
| Project correspondence and approvals | Ordinarily 6 years where justified |
| Routine technical/security logs | Ordinarily 90 days |
| Customer data after termination | 30-day retrieval window, with one standard export |
| Residual backups | Expire under the agreed backup deletion cycle |
Following termination, the 30-day retrieval opportunity includes one standard export, subject to the individual agreement. CRM records are supplied in an agreed structured format; customer-owned attachments and website content in appropriate usable formats. Data is then deleted under the agreed schedule unless legal obligations require retention. Customer-owned information is distinct from Possible Ltd's reusable CRM software. Backup history is not a general retention period for enquiry or contract records.
The contractual security schedule must describe actual implemented measures, including as applicable encrypted connections, authentication, individual permissions, restricted administration, isolated customer databases, maintenance, monitoring, backup/recovery, incident procedures and controlled technical access. The agreed service schedule defines the measures and restoration arrangements that apply; no absolute-security guarantee is given.
Depending on the applicable law and circumstances, you may have rights to access, correct, erase or restrict use of your information, request portability, and withdraw consent where relied on. Rights are subject to their applicable conditions.
Your right to object: you may object to processing based on legitimate interests on grounds relating to your situation, and to direct marketing where applicable. Contact Possible Ltd using the details above. If your request concerns records controlled by a CRM customer, contact that customer; we assist under the applicable agreement.
You can raise concerns with Possible Ltd and complain to the Isle of Man Information Commissioner. Where UK data-protection law applies, you may also complain to the UK Information Commissioner's Office, or another competent authority where applicable. The applicable jurisdiction and any required representative or data-protection contact are identified in the individual agreement where relevant.
AI policy: customer CRM information is not used to train external AI models for GSS Studio's own purposes. Where a customer requests additional AI functionality, the processing arrangements, relevant providers and safeguards must be documented and agreed before activation. This does not categorically prohibit suitably agreed third-party AI processing.
Cookie and tracking policy: avoid unnecessary tracking and do not introduce behavioural profiling. Use only necessary technical cookies unless additional technologies are approved. Provide the disclosures and consent mechanisms legally required before any non-essential technology is enabled.
This policy is reviewed when processing changes. Material changes are communicated appropriately.
Possible Ltd · GSS Studio
GSS Studio — Data Processing Agreement
The Processor is Possible Ltd, trading through GSS Studio, company 134381C, Creg-NY-Shee, 3 Lucerne Court, Douglas, Isle of Man, IM2 6BJ; contact garry@possibleltd.com. The Customer/Controller is the legal entity identified in the completed processing schedule. This agreement is not executed or incorporated merely by viewing it. Complete the order, schedules and approval record before personal data is entrusted to the service.
This agreement is intended for hosted CRM and other agreed services in which Possible Ltd handles personal data for the Customer. It covers only the processing specified in section 17 and the written service order. Possible Ltd's own enquiry, billing and relationship records are addressed separately in its Privacy Policy.
The Customer determines permitted purposes, lawful grounds, required privacy information and the authority for its instructions. Possible Ltd shall act only on documented Customer instructions, including for transfers, except where applicable law requires otherwise; it shall notify the Customer of that requirement in advance unless legally prohibited. If an instruction appears to infringe applicable data-protection law, Possible Ltd shall inform the Customer immediately and seek clarification before continuing the affected operation. It shall assist with security duties, impact assessments and regulatory consultation as applicable, taking account of the processing and information available.
The Customer retains control and ownership of its business information. The agreed CRM architecture is a separately deployed installation with a logically isolated customer database. Possible Ltd shall not routinely inspect, reuse or repurpose customer records. Customer information remains distinct from the standard CRM product, frameworks and other retained intellectual property. Agreed code and independent use rights remain governed by the service order.
Processing may include hosting, organising, retrieving, maintaining, backing up, restoring, exporting and deleting records, solely within the signed schedule. The schedule must identify data-subject groups, data categories, purposes, access locations, duration and restrictions. No special-category or criminal-offence data is presumed authorised. The Customer must disclose any such requirement for a documented assessment before processing. Instructions continue during the agreed retrieval and deletion period where necessary.
Personnel permitted access shall be subject to confidentiality obligations and receive access only for authorised duties. Permissions must follow the agreed access model and be removed when no longer needed. Authorised maintenance, security, support, backup or recovery can require restricted infrastructure access; support access to identifiable records shall be controlled and documented. No claim is made that the Processor lacks technical access capability.
Before operation, the parties must approve a schedule of risk-appropriate technical and organisational measures, responsibilities and evidence of implementation. Record applicable transport protection, authentication, permissions, administration, isolation, updates, monitoring, incident handling, backup controls and testing. Possible Ltd shall implement the agreed measures and meet applicable legal security duties, reviewing their effectiveness. No absolute-security guarantee is created.
Do not appoint a subprocessor without the Customer's prior specific or general written authorisation. Record each approved legal entity, purpose, data, locations and safeguards in the schedule. For general authorisation, give prior notice of intended additions or replacements with a meaningful opportunity to object before access; the notice period and resolution process must be completed before use. Bind subprocessors to equivalent applicable protection and assistance duties. Possible Ltd remains responsible for their relevant obligations as required by applicable law. A preference for UK facilities is not subprocessor authorisation.
Identify storage, support, backup and remote-access countries. Do not make a restricted transfer outside the agreed locations without documented instructions and the applicable lawful mechanism and safeguards. Record the actual mechanism and any assessment required before access begins.
Possible Ltd shall notify the Customer without undue delay after becoming aware of a personal-data breach affecting the processing. Share available details of its nature, affected categories and approximate scale, likely consequences, containment and remedial actions, and the incident contact. Provide staged updates as further facts become available and preserve relevant evidence. Assist the Customer with applicable regulator and individual notifications. Confirm incident contacts and escalation arrangements before processing. Contracted support windows do not postpone any mandatory breach-notification duty.
Forward requests relating to Customer-controlled records promptly to the Customer and do not decide the substantive response unless authorised or legally required. Provide appropriate assistance to locate, access, correct, restrict, export or delete data so the Customer can meet applicable deadlines. Verify authority and identity through an agreed process. Commercial charges or audit procedures must not prevent compliance with mandatory duties.
The linked Service Schedule sets out daily relevant file, database and upload backups, thirty-day recoverable history and a separate off-server copy. One-working-day individual restoration, two-working-day server restoration subject to provider availability, and a recovery point ordinarily within 24 hours are service targets, not guarantees. Record exclusions, dependencies, failure escalation, restore authority and test evidence in the schedule.
At the Customer's choice, return or securely delete personal data and copies when processing ends, unless law requires retention. The commercial arrangement is a thirty-day retrieval opportunity after termination with one standard export included, subject to the individual agreement. Specify a structured CRM format and usable customer attachment/website-content formats. Confirm the timetable and deletion process before activation; do not extend processing for independent purposes. Residual backups must be protected, put beyond ordinary use and expire under a documented deletion cycle, with any restoration reapplying deletion instructions. Disclose legally required retention and restrict its use. Debt recovery does not justify automatic data deletion or improper obstruction of retrieval.
Keep the records required for the agreed processing and applicable law. Provide information needed to demonstrate compliance and allow and contribute to Customer or appointed-auditor inspections. Agree practical notice, confidentiality, scope and arrangements that protect other customers without defeating audit or regulatory rights; urgent incidents or lawful regulator requests may require different timing. Document corrective actions and material processing changes. No certification or audit is represented as completed.
Do not use customer CRM information to train external AI models for GSS Studio's own purposes. Customer-requested AI services require documented instructions identifying the processing purpose, provider, data, locations, training/reuse conditions and safeguards before activation. Apply the subprocessor, confidentiality and transfer provisions where relevant. AI must not independently approve scope, customer expenditure or contractual changes.
Isle of Man law governs, subject to mandatory applicable data-protection and customer protections. The customer-specific schedule identifies the applicable data-protection regimes and any required representative arrangements. The DPA and individual order define precedence for conflicting provisions; mandatory law prevails. Service-agreement liability provisions must not remove statutory duties, individual rights or liability that cannot lawfully be excluded. Subject to liabilities that cannot lawfully be excluded or limited, Possible Ltd's aggregate contractual liability arising out of or in connection with the relevant website or CRM system under the applicable agreement is limited to the total amount actually paid by the Customer for that system under that agreement. Amounts paid for unrelated purchases or services do not form part of this limit. Mandatory statutory rights and liabilities remain unaffected.
Complete and approve the fields below before processing. They are not authorised instructions until agreed in the signed contractual documents.
Possible Ltd · GSS Studio
Hosting & Service Schedule
Website Hosting & Care is £19.99 per month, with the first month following launch included. The standard scope covers website hosting, SSL certificate management, routine security monitoring, applicable system maintenance and updates, scheduled backups and technical assistance for hosting-related faults. Content alterations, additional functionality, redesigns and extensive support are excluded unless agreed separately. The written service schedule defines support allowances, backup frequency and retention, recovery arrangements and service dependencies. No unlimited support or uninterrupted availability is promised.
All standard managed hosting arrangements have a minimum initial term of three months, including the free first month following launch, and continue monthly thereafter. Cancellation requires 30 days’ notice in writing. Any longer minimum commitment or different cancellation arrangement must be expressly agreed in the customer quotation. Hosting cancellation does not cancel any agreed outstanding development payments.
Monday–Friday, 09:00–17:00 UK local time, excluding applicable UK bank holidays. The initial response target is within one working day. Routine hosting fault investigation, maintenance-related technical assistance and hosting or infrastructure queries are included. Customer-requested content changes, training, migration, new features and additional development are charged separately unless included within an agreed management package.
Critical incident coverage is 08:00–23:00 UK local time, seven days per week, including weekends and bank holidays. UK local time means GMT or BST, as applicable. Incidents detected or reported during this period are promptly acknowledged and assessed. Technical intervention begins without unnecessary delay. Once intervention starts, incident management continues beyond 23:00 where necessary until service is restored or an appropriate temporary solution is implemented. Recovery remains subject to circumstances outside our control. Customers receive updates during material service interruptions.
Incidents first detected outside this window are recorded for assessment when coverage resumes at 08:00, unless separate emergency arrangements apply. Critical incidents include complete hosting server failure, a website or CRM becoming wholly unavailable, serious confirmed security incidents requiring immediate containment, and significant infrastructure failures affecting availability or customer-data integrity. Minor technical faults, content changes and routine requests do not qualify.
The combined service is £59.99 per month, with the first month following launch included. It includes the standard website care scope plus CRM application and database hosting, routine infrastructure and security monitoring, applicable security updates and maintenance, scheduled website and CRM backups, technical monitoring and reasonable assistance for hosting-related issues. Bespoke development, new features, data entry, customer administration and unlimited support are excluded. The service schedule defines the support allowance, backup frequency, retention, restoration process and recovery objectives. Backups and monitoring are safeguards, not a guarantee against every loss or security incident.
The standard minimum term, cancellation notice and support arrangements in section 1 also apply to this combined service.
Managed dedicated VPS hosting starts from £100 per month. The final price and scope depend on the required resources, storage, software, operating system, security and management requirements. A dedicated VPS is a virtual private server, not a physically dedicated server. Server specifications and costs must be assessed and confirmed in the customer quotation; the £100 starting point is not an unconditional fixed price. Any independent hosting or client-owned VPS management arrangement is documented separately. A bespoke VPS quotation states whether it replaces the standard care package or includes additional charges, so overlapping costs are clear.
A dedicated managed VPS has a minimum contractual period of 12 months. Thereafter it continues unless terminated with 30 days’ written notice. The standard hosting free-first-month offer does not apply unless separately agreed. The individual agreement confirms the final resources, provider costs, inclusions and contractual dates.
Individual website or CRM failure: target restoration within one working day of incident confirmation. Complete server failure: target restoration within two working days of incident confirmation, subject to hosting-provider availability. Target recovery point: no more than 24 hours, based on the latest successful recoverable backup. These are targets, not unconditional guarantees.
The signed service schedule defines backup coverage, retention, recovery arrangements, exclusions, responsibilities and service dependencies. Thirty days of backup history is not a retention policy for enquiry, contract or CRM records.
Standard Website Hosting & Care (£19.99/month) and Website + CRM Hosting & Care (£59.99/month) have a three-month minimum. The free first month following launch counts towards that term. Thereafter, continuation is monthly with 30 days’ written cancellation notice. Dedicated managed VPS hosting starts from £100/month, with a 12-month minimum, then continuation unless cancelled with 30 days’ written notice. A free first month is not included for VPS contracts unless separately agreed.
Data retrieval: 30 days after termination to retrieve customer data, with one standard export included, subject to final contractual arrangements. Export format, deletion and backup expiry remain to be agreed in the data schedule.
The customer-specific security schedule records the applicable encrypted connections, authentication, individual permissions, restricted administration, customer-database isolation, maintenance, monitoring, backups, restoration, incident handling and technical access controls.
Customer data may be processed only under the agreed Data Processing Agreement. Record actual providers, access countries, transfer safeguards, support allowances, export format and deletion/backup-expiry arrangements. The thirty-day retrieval window includes one standard export. Customer records and usable attachments/content remain distinct from the retained standard CRM software.
The Privacy Policy records business-record retention periods. They do not replace Customer instructions for hosted CRM records. In particular, the thirty-day recoverable backup history is separate from the deletion cycle for residual backups.
Understanding your business comes first
Tell us a little about your business and what you'd like to achieve. We'll arrange a discovery conversation, establish what you need and provide a clear proposal covering everything required.
No technical knowledge necessary. No unexpected extras. Just a straightforward route from idea to launch.
