Privacy policy

This website is run by WebUp Ltd, a company registered in England and Wales (company number 17565078), registered office 38 Blackboy Road, Exeter, EX4 6SZ. We are the data controller for the personal data described here. You can contact us about privacy at any time at alberto@web-up.uk.

• Enquiries: when you use our contact form we collect your name, email address, and optionally your phone number, business name, budget and the details of your project.
• Clients: when you work with us we keep contact details, project information, invoices and payment records.
• Client portal: if you have a portal login we store your name, email address and the content you edit on your website.
• Website usage: we use privacy-friendly analytics that count page views without cookies and without identifying you personally.

• To reply to your enquiry and prepare a quote. Our lawful basis is taking steps at your request before entering into a contract.
• To deliver and support the work we do for you. Our lawful basis is performing our contract with you.
• To keep accounting and tax records. Our lawful basis is our legal obligation.
• To keep the website secure and understand how it is used. Our lawful basis is our legitimate interest in running a safe, useful website.

We never sell your data and we do not send marketing emails unless you have asked us to.

We use a small number of trusted providers to run this website and our services:

• Vercel, to host the website and provide anonymous analytics.
• Resend, to deliver emails sent from the contact form and the client portal.
• Supabase, to store client portal accounts and website content.
• Our accountant and accounting software, for invoices and tax records.

Some of these providers process data outside the UK, including in the United States. Where that happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement.

• Enquiries that do not lead to a project: up to 2 years, then deleted.
• Client and financial records: 6 years after the end of the financial year they relate to, as required for tax purposes.
• Client portal accounts: for as long as you are a client, then deleted within 90 days unless you ask us to keep them.

The public website does not use advertising or tracking cookies. The client portal uses strictly necessary cookies to keep you signed in. These are required for the portal to work, so they do not need your consent.

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct or delete it
• object to or ask us to restrict how we use it
• ask us to transfer it to you or another organisation

To use any of these rights, email alberto@web-up.uk. We will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

We may update this policy from time to time. The date at the top of the page shows when it last changed.