1. Who We Are
123-web.uk is a website design and development service for tradespeople and small businesses across London and the UK.
Data Controller: Adrian Iscru
Trading as: 123-web.uk
Location: Web Developer based in Woodford, Redbridge, London
Contact: [email protected]
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I am the data controller responsible for your personal data.
2. What Data We Collect
To build and manage your website, I may collect and process the following types of personal data:
- Identity & Contact Data: Your name, business name, email address, phone number.
- Communication Data: WhatsApp messages, emails, SMS, and any other correspondence between us.
- Project Data: Photos, logos, text, testimonials, service descriptions, pricing, and any other content you send me to use on your website.
- Technical Data: IP address, browser type, device information when you visit 123-web.uk or your completed website, if analytics are enabled.
- Financial Data: Invoices and payment records. Note: I do not store full payment card details. Payments are processed via third-party providers such as Stripe, PayPal, or bank transfer.
- Usage Data: Information about how you use this website and your customer website, if Google Analytics 4 is used on your plan.
3. How We Use Your Data
Your data is used only for the purposes described below:
4. Legal Basis for Processing
Under UK GDPR, I process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Building your website & providing services | Contract |
| Invoicing & HMRC records | Legal Obligation |
| Project updates via WhatsApp/email | Legitimate Interest |
| Marketing emails about my services | Consent |
| Google Analytics on your website | Consent |
You can withdraw consent at any time by contacting me. This will not affect work already completed under contract.
5. Data Sharing & Third Parties
Your data is never sold, rented, or shared for marketing. I only share data with trusted third parties necessary to deliver your website:
- Hosting Providers: Such as Cloudflare, Vercel, or Krystal to host your website files securely in the UK/EU.
- Payment Processors: Stripe, PayPal, or your bank to process payments. They have their own privacy policies.
- Analytics: Google Analytics 4, only if enabled on your Growth plan. IP addresses are anonymised.
- Domain Registrars: Such as Namecheap or GoDaddy to register your domain name.
- Legal/Accounting: HMRC or my accountant for tax compliance, if required by law.
I will never sell your data.
All third parties are UK GDPR compliant and act as data processors under written agreements.
6. Data Retention
I keep your data only as long as necessary:
Client Project Files
Retained for 6 years after project completion for tax and legal purposes, as required by HMRC.
WhatsApp & Email Messages
Deleted within 30 days after project completion, unless you ask me to keep them for ongoing support or testimonials.
Invoices & Payment Records
Kept for 6 years to comply with UK tax law.
Marketing Consent
Until you withdraw consent or 2 years of inactivity.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to Access
Request a copy of the data I hold about you.
Right to Rectification
Ask me to correct any inaccurate or incomplete data.
Right to Erasure
Request deletion of your data, subject to legal obligations.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest or direct marketing.
Right to Complain
Lodge a complaint with the ICO if you believe your rights are breached.
To exercise any of these rights, email me at [email protected]. I will respond within 30 days.
Complain to the ICO: If you're unhappy with how I handle your data, you have the right to complain to the Information Commissioner's Office (ICO). Visit ico.org.uk or call 0303 123 1113.
9. Data Security
I take data security seriously and use appropriate measures to protect your information:
- SSL encryption on all websites to protect data in transit
- Secure cloud storage with 2FA enabled
- Regular software updates and security patches
- Encrypted backups of client files
- WhatsApp end-to-end encryption for messages
- Limited access: only I, Adrian, access your project data
While I work hard to protect your data, no online service is 100% secure. If you suspect a data breach, contact me immediately at [email protected].
10. International Data Transfers
Your data is stored and processed in the UK where possible. Some third-party services like Google Analytics may transfer data to the US under UK GDPR-approved safeguards such as Standard Contractual Clauses.
Hosting is provided via UK or EU data centres by default. If you require UK-only hosting, please let me know before your project starts.
11. Changes to This Policy
I may update this Privacy Policy to reflect changes in law, my services, or data practices. When I do, I will update the "Last updated" date at the top of this page.
For significant changes, I will notify existing clients via email or WhatsApp. Continued use of my services after changes means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, your data, or want to exercise your rights, contact me:
Data Controller
Adrian Iscru
123-web.uk
Based in
Woodford, Redbridge, London
I aim to respond to all privacy requests within 72 hours, and will complete your request within 30 days as required by UK GDPR.