Privacy Policy

Web24 Ltd (“Web24”, “we”, “us” or “our”) provides digital consultancy, design, development, hosting, marketing, maintenance, media and technical-support services.

For personal information used for our own business purposes, Web24 Ltd is the data controller. When we process personal information solely on a Client’s documented instructions as part of a service, the Client will normally be the controller and Web24 will act as its processor. Additional data-processing terms may apply in that situation.

Depending on how you interact with us, we may collect:

• Identity and contact details, such as your name, job title, organisation, postal address, email address and telephone number.
• Enquiry and communication data, including messages, meeting notes, support requests, feedback and correspondence.
• Commercial and account data, such as proposals, contracts, services purchased, billing details, invoices, payment status and transaction records. We do not normally receive or store full payment-card details where payment is handled by a banking or payment provider.
• Project and service data, including content, brand assets, technical requirements, user accounts, system information, access details and other materials supplied for a project or support request.
• Technical and usage data, such as IP address, browser type, device type, operating system, referring page, requested URLs, timestamps and diagnostic or security logs generated when you use our website or hosted services.
• Marketing preferences, including whether you wish to receive particular communications and how you prefer us to contact you.
• Public and third-party information, where relevant to a business relationship, such as information from your organisation’s website, Companies House, professional platforms, service partners or public registers.

Please do not send special-category personal data, criminal-offence data or sensitive credentials unless it is necessary, authorised and protected through an agreed secure method.

We may use personal information to:

• respond to enquiries and prepare proposals or quotations;
• enter into, manage and perform contracts;
• plan, design, develop, host, maintain and support websites, applications, systems and digital campaigns;
• manage Client accounts, invoicing, payments and business records;
• communicate about projects, incidents, renewals, service changes and security matters;
• operate, monitor, troubleshoot and secure our website, infrastructure and services;
• prevent fraud, misuse, spam, unauthorised access and other harmful activity;
• improve our services, workflows, quality and customer experience;
• send relevant business updates or marketing where permitted by law, with an option to opt out;
• establish, exercise or defend legal claims and comply with legal, tax, accounting and regulatory obligations.

We will not sell your personal information. We will not use it for automated decision-making that produces legal or similarly significant effects unless we explain that processing separately and provide any legally required safeguards.

We process personal information only where we have a lawful basis. Depending on the circumstances, this may be:

• Contract — processing necessary to take requested steps before a contract or to perform a contract with you.
• Legitimate interests — operating and improving our business, communicating with business contacts, securing systems, preventing misuse and managing legal claims, where those interests are not overridden by your rights.
• Legal obligation — complying with tax, accounting, regulatory, court or law-enforcement requirements.
• Consent — where we specifically ask for permission. You may withdraw consent at any time, without affecting processing already carried out lawfully.

Where we rely on legitimate interests, you may request further information about our balancing assessment.

Contact form. The contact form on this website currently prepares an email and opens your device’s email application. The form content is not submitted to or stored by the website itself. If you choose to send the email, your email provider will process it and Web24 will receive and retain it as business correspondence.

Server logs. Our hosting infrastructure may automatically record technical information such as IP addresses, requested pages, timestamps, browser details and security events. We use this information to deliver the website, diagnose faults, maintain security and prevent misuse.

Cookies. This website does not currently set analytics, advertising or preference cookies and does not use browser local storage. Essential infrastructure or security providers may process technical identifiers necessary to deliver and protect the service. If we introduce non-essential cookies or tracking technologies, we will update this Policy and request consent where required.

Google Fonts. The website requests font files through Google Fonts. When your browser connects to Google’s servers, Google may receive technical information including your IP address, browser details and the requested resource. Google acts under its own privacy terms. You can learn more in Google’s Privacy Policy.

External links. Our website may link to third-party websites or services. We do not control their privacy practices and recommend reading their privacy information before providing personal data.

We may share personal information where reasonably necessary with:

• employees, contractors and specialist partners involved in providing the Services;
• hosting, cloud, email, backup, communications, security, analytics, accounting and other IT service providers;
• domain registries, software vendors, advertising platforms, payment providers and other services selected for a Client project;
• accountants, insurers, auditors, legal advisers and other professional advisers;
• regulators, courts, public authorities or law enforcement where disclosure is required or permitted by law;
• a prospective buyer, investor or successor in connection with a genuine merger, financing, reorganisation or sale of all or part of our business.

We require service providers handling personal information for us to protect it, use it only for authorised purposes and comply with applicable data-protection obligations.

Some service providers, platforms or project partners may process information outside the United Kingdom. The data-protection laws in those locations may differ from UK law.

Where a restricted international transfer occurs, we will use an approved safeguard where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another legally recognised mechanism. You may contact us for further information about safeguards relevant to your data.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing Services, maintaining business records, resolving disputes and meeting legal, tax, accounting and regulatory requirements.

Retention periods depend on the type of information and relationship. Enquiries that do not lead to a project are normally reviewed and deleted when no longer useful. Contract, invoice and core Client records may generally be retained for up to six years after the relationship or relevant financial period ends, and longer where required for a legal claim or statutory obligation.

Technical and security logs are generally retained for a shorter operational period unless an incident requires investigation. Project files and backups are retained according to the relevant service agreement and backup cycle. When information is no longer required, we delete, anonymise or securely archive it as appropriate.

We use proportionate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction. Measures may include access controls, secure connections, updates, backups, monitoring, staff or contractor confidentiality and incident-response procedures.

No internet transmission or storage system can be guaranteed completely secure. Clients should use agreed secure channels for passwords, access keys and sensitive project data rather than ordinary email wherever possible.

If we become aware of a personal-data breach, we will investigate, mitigate the impact and notify affected Clients, individuals or regulators where required by law.

Subject to applicable law and any relevant exemptions, you may have the right to:

• request access to your personal information and receive a copy;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a structured, commonly used and machine-readable format and ask for it to be transferred;
• withdraw consent where processing is based on consent;
• complain to a data-protection supervisory authority.

To exercise a right, email info@web24ltd.co.uk. We may ask for information to verify your identity and clarify your request. We normally respond within one month, although the law permits an extension for complex or multiple requests. We do not ordinarily charge a fee unless a request is manifestly unfounded or excessive.

Our website and Services are intended for businesses and are not directed at children. We do not knowingly collect personal information directly from children through this website. If you believe a child has provided personal information to us without appropriate authorisation, please contact us so that we can investigate and take appropriate action.

We may update this Privacy Policy when our practices, services or legal obligations change. The latest version will be published on this page with a revised effective date. Where a change materially affects how we use personal information, we will take reasonable steps to provide additional notice.

Questions, requests or concerns about privacy can be sent to:

We would appreciate the opportunity to address your concern first. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about making a complaint is available at ico.org.uk/make-a-complaint, or by calling the ICO on 0303 123 1113.