Privacy Policy

1. Introduction

Webhooks Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

We are registered in England and Wales under company number 16791194. Our registered office is located in Wales, United Kingdom.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

When you contact us through our website, we may collect:

• Your name
• Email address
• Company name and role
• Service interest and project details
• Marketing consent preferences (if you opt-in to receive communications)
• Any other information you choose to provide in your message

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring website addresses

2.3 Third-Party Services

Our website uses Google Fonts, which may collect certain technical information. Please see section 5 for more details on third-party services.

3. How We Use Your Information

We use your personal data for the following purposes:

• Communication: To respond to your enquiries and provide information about our services
• Service Delivery: To provide, maintain, and improve our software development services
• Business Operations: To manage our client relationships and fulfil contractual obligations
• Marketing Communications: If you opt-in, to send you occasional insights about Azure development, cloud architecture, and related technical content. You can unsubscribe at any time via the link in every email.
• Legal Compliance: To comply with legal and regulatory requirements
• Website Improvement: To understand how visitors use our website and improve user experience

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering a contract
• Legal Obligation: Processing is necessary to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., responding to enquiries), provided this does not override your rights

5. Third-Party Services

5.1 Google Fonts

Our website uses Google Fonts to display typefaces. When you visit our site, your browser may load fonts from Google's servers, which may collect your IP address and browser information. This helps Google understand how their fonts are being used.

For more information, see Google's Privacy Policy: https://policies.google.com/privacy

5.2 Future Analytics

We may implement analytics services in the future. If we do, we will update this policy and, where required, obtain your consent through a cookie banner.

6. Data Storage and Security

6.1 Where We Store Your Data

Your data is stored securely within the United Kingdom and European Economic Area (EEA). We use Microsoft Azure cloud services, which comply with UK GDPR requirements.

6.2 How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Secure backup procedures

6.3 Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: Up to 2 years if no contract is formed
• Marketing communications: Until you unsubscribe or we cease marketing activities. You can unsubscribe at any time via the link in every email or by contacting us directly.
• Client data: For the duration of the contract plus 7 years for legal and accounting purposes
• Website logs: Up to 90 days

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request a copy of your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us using the details in section 11.

8. Cookies

Our website currently does not use cookies for tracking or analytics purposes. We only use essential technical cookies required for the website to function properly.

If we implement analytics or tracking cookies in the future, we will:

• Update this Privacy Policy
• Implement a cookie consent banner
• Provide you with clear information about the cookies we use
• Obtain your consent before placing non-essential cookies

9. Children's Privacy

Our services are intended for businesses and professional users. We do not knowingly collect personal data from children under 16 years of age. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Updating the "Last Updated" date at the top of this page
• Posting a notice on our website
• Emailing existing clients if the changes materially affect how we process their data

We encourage you to review this policy periodically.

11. Contact Us

12. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK's data protection authority:

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first if possible.

13. International Transfers

We do not routinely transfer personal data outside the UK or EEA. If we need to do so (for example, when using certain cloud services), we will:

• Ensure the recipient country has adequate data protection laws, or
• Use standard contractual clauses approved by the UK ICO, or
• Obtain your explicit consent