How we handle personal data.

This notice explains what personal data Webovate Ltd collects when you use this website or contact us, why we collect it, how long we keep it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Webovate Ltd is the data controller. We are registered in England and Wales, company number 09051059, at 319a Uttoxeter Road, Blythe Bridge, Stoke-on-Trent, Staffordshire, ST11 9QA. Questions about this notice or your data: hello [at] webovate [dot] co [dot] uk .

What we collect and why

Visiting the website. This site sets no cookies and runs no analytics, advertising or tracking scripts. Fonts, images and code are served from our own domain, so no third party receives your browsing data when a page loads. Our hosting provider keeps standard access logs (IP address, requested page, browser type and time) so that we can keep the site secure and diagnose faults. Lawful basis: our legitimate interest in running a secure website.

Contacting us. If you email us or connect on LinkedIn, we receive your name, contact details, your organisation and whatever you choose to tell us about your project. We use it to reply, to assess whether we can help and, if we work together, to deliver the engagement. Lawful basis: our legitimate interest in responding to enquiries and, once an engagement is agreed, the performance of a contract.

Client documents area. Part of the site is password protected and holds standard documents for clients and procurement teams. Access to it and downloads from it are recorded in the same access logs as the rest of the site, and the shared credentials are issued by us to named contacts. Lawful basis: our legitimate interest in controlling access to business documents.

Working together. During an engagement we hold the contact details of the people we work with, contractual and billing information, and the correspondence and records the work produces. Lawful basis: performance of a contract and our legal obligations under UK company, tax and anti-money-laundering law.

We do not buy, sell or share marketing lists, and we do not add you to a mailing list because you contacted us. We do not use automated decision-making or profiling. This site is not directed at children.

How long we keep it

• Website access logs: no longer than 90 days.
• Enquiries that do not lead to an engagement: 12 months after our last exchange, then deleted.
• Client contact details, contracts, invoices and engagement records: six years after the engagement ends, which is the period UK tax and limitation law requires, then deleted.
• Correspondence needed to establish, exercise or defend a legal claim: for as long as that need exists.

Who we share it with

Only the suppliers we need to run the business, each bound by contract to protect your data: our hosting provider (Amazon Web Services, UK and EU regions), our email and document provider, and our accountants for billing and statutory records. We do not sell personal data. We may disclose it where the law requires, for example to HMRC or a regulator.

Where a supplier processes data outside the United Kingdom, we rely on the UK adequacy regulations or the UK International Data Transfer Agreement to protect it.

How we protect it

Data is held on encrypted, access-controlled systems. Client material is handled under the confidentiality terms of each engagement, and we hold professional indemnity insurance. If a breach ever affects your rights, we will tell you and the Information Commissioner's Office within the timescales the law sets.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, or ask for it in a portable form. Where we rely on consent, you can withdraw it at any time. Email hello [at] webovate [dot] co [dot] uk and we will respond within one month. There is no charge unless a request is clearly unfounded or excessive.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would welcome the chance to resolve the matter with you first.

Changes

We will update this notice if our practices change and show the date of the latest version here.

Version 1.0, October 2026