Legal

Privacy Policy

Effective date: 17th March 2025

Summary

This Privacy Policy sets out how we, WebElev8 (a trading name of Innovate Web Solutions), collect, store and use information about you when you use or interact with our website, webelev8.co.uk, and where we otherwise obtain or collect information about you.

  • Data controller: WebElev8 (Innovate Web Solutions)
  • Registered address: Izabella House, Regent Place, Birmingham, B1 3NJ, United Kingdom
  • Contact email: hello@webelev8.co.uk
  • We do not sell your personal information to third parties.

1. Our Details

The data controller in respect of our website is WebElev8, a trading name of Innovate Web Solutions. You can contact the data controller by writing to:

WebElev8 (Innovate Web Solutions)
Izabella House, Regent Place
Birmingham, B1 3NJ
United Kingdom

Or by emailing us at hello@webelev8.co.uk or calling 0203 488 0336.

2. Information We Collect When You Visit Our Website

Web Server Log Information

Our website server automatically logs the IP address you use to access our website as well as other information about your visit, such as the pages accessed, information requested, the date and time of the request, and the source of your access to our website. Our server is located in the United Kingdom/European Economic Area via our hosting provider, Supabase.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR) and our legitimate interests in ensuring network and IT security (Article 6(1)(f) GDPR).

Cookies and Similar Technologies

We use cookies and similar technologies on our website, including essential, functional, analytical and targeting cookies. For full details, please see our Cookie Policy.

You can reject non-essential cookies by changing your browser settings. For further information about cookies, please visit www.allaboutcookies.org.

Google Analytics

We use Google Analytics to analyse how visitors use our website. Google Analytics collects information such as how often users visit the site, what pages they visit and what other sites they used prior to coming to our site. Google uses this data to provide us with reports about site usage. Information is shared with Google on an anonymised and aggregated basis.

You can opt out of Google Analytics by installing the browser plugin available at tools.google.com/dlpage/gaoptout.

Legal basis: Our legitimate interests in improving our website and understanding how users interact with it (Article 6(1)(f) GDPR).

3. Information We Collect When You Contact Us

Email

When you send an email to the email address displayed on our website, we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email). We use Google Workspace (Gmail) to manage our email. Google's privacy policy is available at policies.google.com/privacy.

Legal basis: Our legitimate interests in responding to enquiries and maintaining correspondence records (Article 6(1)(f) GDPR), and where messages relate to a contract, necessity to perform or enter into a contract (Article 6(1)(b) GDPR).

Phone

When you contact us by phone, we collect your phone number and any information you provide to us during your conversation. We do not record phone calls.

Post

If you contact us by post, we will collect any information you provide in your postal communications.

4. Information We Collect Via Our Forms

Contact Form

When you contact us using our contact form, we collect your name, email address, phone number, and the message you send us. This information is stored securely in our database (Supabase) and used solely to respond to your enquiry.

Get a Quote / Get Started Form

When you submit a quote request, we collect your name, email address, phone number, business name, and details about the services you are interested in. We use this information to prepare and send you a tailored quote and to follow up regarding your enquiry.

Legal basis: Our legitimate interests in responding to enquiries (Article 6(1)(f) GDPR) and, where applicable, the necessity to take steps to enter into a contract at your request (Article 6(1)(b) GDPR).

Marketing Communications

You may optionally subscribe to receive marketing communications from us about our services. We will only send you such communications where you have provided your explicit consent, or where we have a legitimate interest in marketing similar services to existing clients. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by emailing hello@webelev8.co.uk.

5. Automated Decision-Making and Profiling

We use analytics tools including Google Analytics and server log analysis to understand how visitors use our website. These tools may involve profiling to help us improve our services and website experience. We use targeting cookies to display our advertisements to people who have previously visited our website on other websites across the internet.

We do not make solely automated decisions that produce legal effects or similarly significant effects on you.

6. Information from Third Parties

We may receive information about you from third parties in the following circumstances:

  • From referral sources or business partners who refer you to us for services
  • From publicly accessible sources such as business directories, social media, or your own website where we are developing or managing digital services for you
  • From third-party review platforms (e.g. Trustpilot) in relation to feedback about our services

Where we receive your information in error or without a lawful basis, we will delete it promptly.

7. Disclosure and Additional Uses of Your Information

Service Providers

We use a number of third-party service providers to help us run our business. These include:

ProviderPurposeLocation
Google Workspace (Gmail)Email communicationUSA
SupabaseDatabase and backend hostingEU/USA
Google AnalyticsWebsite analyticsUSA
WhatsApp BusinessCustomer messagingUSA
HubSpot (where applicable)CRM and marketingUSA
Stripe / PayPal (where applicable)Payment processingUSA
Mailchimp (where applicable)Email marketingUSA

Legal basis: Our legitimate interests in running our business efficiently (Article 6(1)(f) GDPR) and, where applicable, performance of a contract (Article 6(1)(b) GDPR).

Other Third Parties

We may also share your information with:

  • Accountants and financial advisors — for tax and accounting purposes
  • Legal advisors — where required to obtain legal advice
  • Independent contractors — subcontractors we engage to deliver your project
  • Insurers — in connection with claims or compliance obligations
  • Law enforcement or regulatory authorities — where required by law or to protect our legal rights
  • Prospective buyers — in the event of a business sale or merger

We do not sell your personal information to any third party for marketing or commercial purposes.

8. How Long We Retain Your Information

Type of InformationRetention Period
Server log information12 months
Enquiry / contact form submissions2 years from date of enquiry
Client order and invoice records6 years (HMRC requirements)
Email marketing subscribersUntil unsubscribed or service discontinued
Project files and client dataDuration of engagement + 2 years

In all other cases, we retain your information for no longer than is necessary, taking into account the purpose for which it was collected, any legal obligations we have, and the criteria set out in applicable data protection legislation.

9. How We Secure Your Information

We take appropriate technical and organisational measures to protect your personal information, including:

  • Storing your information on secure servers with restricted access
  • Using SSL/TLS encryption for all data transmitted to and from our website
  • Encrypting payment transactions via our third-party payment processors
  • Limiting access to your personal data to authorised personnel only
  • Using Row Level Security (RLS) policies on our database to restrict access to your data
  • Regularly reviewing and updating our security practices

Please note that the transmission of information over the internet is not entirely secure. While we take all reasonable steps to protect your information, we cannot guarantee the security of data transmitted to us electronically, and you do so at your own risk.

10. Transfers Outside the European Economic Area

Some of our third-party service providers are based outside the United Kingdom and European Economic Area (EEA), in particular in the United States of America. Where we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Transfers to countries with an adequacy decision from the UK/EU authorities
  • Providers who participate in approved certification frameworks (e.g. the UK-US Data Bridge)

For further information about the safeguards used for international transfers, please contact us at hello@webelev8.co.uk.

11. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal information:

Right of access

Request a copy of the personal information we hold about you.

Right to rectification

Request that we correct inaccurate or incomplete information.

Right to erasure

Request that we delete your personal information in certain circumstances.

Right to restriction

Request that we restrict our processing of your information.

Right to portability

Receive your information in a structured, machine-readable format.

Right to object

Object to our processing of your information for certain purposes, including direct marketing.

Right to withdraw consent

Withdraw your consent at any time where processing is based on consent.

Right to complain

Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us by email at hello@webelev8.co.uk or in writing to the address above. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). Contact details are available at ico.org.uk.

12. Sensitive Personal Information

We do not knowingly or intentionally collect sensitive personal information (such as information about racial or ethnic origin, political opinions, religious beliefs, health, or sexual orientation). Please do not submit sensitive personal information to us. If you inadvertently do so, we will delete it promptly.

13. Changes to This Privacy Policy

We update this Privacy Policy from time to time. Minor changes will be reflected by updating the effective date at the top of this page. Where we make significant changes that affect how we process your personal information, we will notify you by email (where we hold your email address) or by posting a prominent notice on our website.

14. Children's Privacy

Our website is not directed at persons under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will delete it immediately. If you believe we have collected such information, please contact us at hello@webelev8.co.uk.

Questions about this policy?

If you have any questions about how we handle your personal data, please do not hesitate to get in touch.