Legal
Privacy Policy
Effective date: 17th March 2025
Summary
This Privacy Policy sets out how we, WebElev8 (a trading name of Innovate Web Solutions), collect, store and use information about you when you use or interact with our website, webelev8.co.uk, and where we otherwise obtain or collect information about you.
- Data controller: WebElev8 (Innovate Web Solutions)
- Registered address: Izabella House, Regent Place, Birmingham, B1 3NJ, United Kingdom
- Contact email: hello@webelev8.co.uk
- We do not sell your personal information to third parties.
1. Our Details
The data controller in respect of our website is WebElev8, a trading name of Innovate Web Solutions. You can contact the data controller by writing to:
Izabella House, Regent Place
Birmingham, B1 3NJ
United Kingdom
Or by emailing us at hello@webelev8.co.uk or calling 0203 488 0336.
2. Information We Collect When You Visit Our Website
Web Server Log Information
Our website server automatically logs the IP address you use to access our website as well as other information about your visit, such as the pages accessed, information requested, the date and time of the request, and the source of your access to our website. Our server is located in the United Kingdom/European Economic Area via our hosting provider, Supabase.
Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR) and our legitimate interests in ensuring network and IT security (Article 6(1)(f) GDPR).
Cookies and Similar Technologies
We use cookies and similar technologies on our website, including essential, functional, analytical and targeting cookies. For full details, please see our Cookie Policy.
You can reject non-essential cookies by changing your browser settings. For further information about cookies, please visit www.allaboutcookies.org.
Google Analytics
We use Google Analytics to analyse how visitors use our website. Google Analytics collects information such as how often users visit the site, what pages they visit and what other sites they used prior to coming to our site. Google uses this data to provide us with reports about site usage. Information is shared with Google on an anonymised and aggregated basis.
You can opt out of Google Analytics by installing the browser plugin available at tools.google.com/dlpage/gaoptout.
Legal basis: Our legitimate interests in improving our website and understanding how users interact with it (Article 6(1)(f) GDPR).
3. Information We Collect When You Contact Us
When you send an email to the email address displayed on our website, we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email). We use Google Workspace (Gmail) to manage our email. Google's privacy policy is available at policies.google.com/privacy.
Legal basis: Our legitimate interests in responding to enquiries and maintaining correspondence records (Article 6(1)(f) GDPR), and where messages relate to a contract, necessity to perform or enter into a contract (Article 6(1)(b) GDPR).
Phone
When you contact us by phone, we collect your phone number and any information you provide to us during your conversation. We do not record phone calls.
Post
If you contact us by post, we will collect any information you provide in your postal communications.
4. Information We Collect Via Our Forms
Contact Form
When you contact us using our contact form, we collect your name, email address, phone number, and the message you send us. This information is stored securely in our database (Supabase) and used solely to respond to your enquiry.
Get a Quote / Get Started Form
When you submit a quote request, we collect your name, email address, phone number, business name, and details about the services you are interested in. We use this information to prepare and send you a tailored quote and to follow up regarding your enquiry.
Legal basis: Our legitimate interests in responding to enquiries (Article 6(1)(f) GDPR) and, where applicable, the necessity to take steps to enter into a contract at your request (Article 6(1)(b) GDPR).
Marketing Communications
You may optionally subscribe to receive marketing communications from us about our services. We will only send you such communications where you have provided your explicit consent, or where we have a legitimate interest in marketing similar services to existing clients. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by emailing hello@webelev8.co.uk.
5. Automated Decision-Making and Profiling
We use analytics tools including Google Analytics and server log analysis to understand how visitors use our website. These tools may involve profiling to help us improve our services and website experience. We use targeting cookies to display our advertisements to people who have previously visited our website on other websites across the internet.
We do not make solely automated decisions that produce legal effects or similarly significant effects on you.
6. Information from Third Parties
We may receive information about you from third parties in the following circumstances:
- From referral sources or business partners who refer you to us for services
- From publicly accessible sources such as business directories, social media, or your own website where we are developing or managing digital services for you
- From third-party review platforms (e.g. Trustpilot) in relation to feedback about our services
Where we receive your information in error or without a lawful basis, we will delete it promptly.
7. Disclosure and Additional Uses of Your Information
Service Providers
We use a number of third-party service providers to help us run our business. These include:
| Provider | Purpose | Location |
|---|---|---|
| Google Workspace (Gmail) | Email communication | USA |
| Supabase | Database and backend hosting | EU/USA |
| Google Analytics | Website analytics | USA |
| WhatsApp Business | Customer messaging | USA |
| HubSpot (where applicable) | CRM and marketing | USA |
| Stripe / PayPal (where applicable) | Payment processing | USA |
| Mailchimp (where applicable) | Email marketing | USA |
Legal basis: Our legitimate interests in running our business efficiently (Article 6(1)(f) GDPR) and, where applicable, performance of a contract (Article 6(1)(b) GDPR).
Other Third Parties
We may also share your information with:
- Accountants and financial advisors — for tax and accounting purposes
- Legal advisors — where required to obtain legal advice
- Independent contractors — subcontractors we engage to deliver your project
- Insurers — in connection with claims or compliance obligations
- Law enforcement or regulatory authorities — where required by law or to protect our legal rights
- Prospective buyers — in the event of a business sale or merger
We do not sell your personal information to any third party for marketing or commercial purposes.
8. How Long We Retain Your Information
| Type of Information | Retention Period |
|---|---|
| Server log information | 12 months |
| Enquiry / contact form submissions | 2 years from date of enquiry |
| Client order and invoice records | 6 years (HMRC requirements) |
| Email marketing subscribers | Until unsubscribed or service discontinued |
| Project files and client data | Duration of engagement + 2 years |
In all other cases, we retain your information for no longer than is necessary, taking into account the purpose for which it was collected, any legal obligations we have, and the criteria set out in applicable data protection legislation.
9. How We Secure Your Information
We take appropriate technical and organisational measures to protect your personal information, including:
- Storing your information on secure servers with restricted access
- Using SSL/TLS encryption for all data transmitted to and from our website
- Encrypting payment transactions via our third-party payment processors
- Limiting access to your personal data to authorised personnel only
- Using Row Level Security (RLS) policies on our database to restrict access to your data
- Regularly reviewing and updating our security practices
Please note that the transmission of information over the internet is not entirely secure. While we take all reasonable steps to protect your information, we cannot guarantee the security of data transmitted to us electronically, and you do so at your own risk.
10. Transfers Outside the European Economic Area
Some of our third-party service providers are based outside the United Kingdom and European Economic Area (EEA), in particular in the United States of America. Where we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries with an adequacy decision from the UK/EU authorities
- Providers who participate in approved certification frameworks (e.g. the UK-US Data Bridge)
For further information about the safeguards used for international transfers, please contact us at hello@webelev8.co.uk.
11. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal information:
Right of access
Request a copy of the personal information we hold about you.
Right to rectification
Request that we correct inaccurate or incomplete information.
Right to erasure
Request that we delete your personal information in certain circumstances.
Right to restriction
Request that we restrict our processing of your information.
Right to portability
Receive your information in a structured, machine-readable format.
Right to object
Object to our processing of your information for certain purposes, including direct marketing.
Right to withdraw consent
Withdraw your consent at any time where processing is based on consent.
Right to complain
Lodge a complaint with the Information Commissioner's Office (ICO).
To exercise any of these rights, please contact us by email at hello@webelev8.co.uk or in writing to the address above. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). Contact details are available at ico.org.uk.
12. Sensitive Personal Information
We do not knowingly or intentionally collect sensitive personal information (such as information about racial or ethnic origin, political opinions, religious beliefs, health, or sexual orientation). Please do not submit sensitive personal information to us. If you inadvertently do so, we will delete it promptly.
13. Changes to This Privacy Policy
We update this Privacy Policy from time to time. Minor changes will be reflected by updating the effective date at the top of this page. Where we make significant changes that affect how we process your personal information, we will notify you by email (where we hold your email address) or by posting a prominent notice on our website.
14. Children's Privacy
Our website is not directed at persons under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will delete it immediately. If you believe we have collected such information, please contact us at hello@webelev8.co.uk.
Questions about this policy?
If you have any questions about how we handle your personal data, please do not hesitate to get in touch.