Privacy Policy
Webcetera UK Ltd
Office 3, The Old Chapel, Wrawby Street, Brigg, North Lincolnshire, DN20 8JJ
Company number: 11241212 | VAT number: GB292488657 | ICO reference: ZA326367
01652 242430 | info@webcetera.co.uk
Last updated: 11 September 2026
This policy explains what we do with personal information when you use this website or contact us.
If you're an individual at a business we work with, day-to-day handling of your own contact details as a client is explained in the data notice we provide with your proposal, not on this page.
Who we are
Webcetera UK Ltd is the data controller for the information described in this policy. Our details are at the top of this page.
What this policy covers
This policy covers this website and the people who visit or contact us through it.
It does not cover the websites we build and manage for clients. When we work on a client's website, analytics or ecommerce platform, we act on that client's instructions as their processor. The client is the controller and their own privacy policy applies. Our handling of that data is governed by the agreement we hold with them.
Information we collect
When you contact us. If you fill in a form on this website, email us or call us, we collect your name, your email address, your phone number where you give it, the name of your business, and whatever you choose to tell us about your enquiry. Messages sent through our contact forms arrive by email and are stored securely in our Google Workspace Business account. We only use them to reply to you and to keep a record of the conversation.
When you use the website. Our hosting and security systems record technical information automatically, including your IP address, the pages you request, the site or search that referred you, your browser and device type, and the date and time of access.
When you agree to analytics and marketing cookies. We collect information about how you move around the site, which pages hold your attention, and in some cases a recording of your session as a series of anonymised mouse movements and clicks. This only happens if you have agreed to it.
We do not ask for or want special category data, such as health or ethnicity information. Please do not send it to us.
Why we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to your enquiry and give you a quote | So we can answer you and work out whether we can help | Steps taken at your request before entering a contract, and our legitimate interests in running the business |
| Send marketing emails about our services | To tell prospective and existing clients what we do | Consent, or the soft opt-in for existing clients under PECR. Every email has an unsubscribe link |
| Measure how the website is used and improve it | To see what is working and fix what is not | Consent |
| Show and measure advertising on other platforms | To reach people who have shown an interest in what we do | Consent |
| Block spam and abuse of our forms | To keep the site usable and our inbox clean | Our legitimate interests in the security of the service |
Where we rely on legitimate interests, we have weighed our reasons against your rights and privacy. You can ask us for that assessment.
Cookies and similar technologies
Cookies and similar technologies store or read information on your device. UK law calls these storage and access technologies.
Strictly necessary ones, such as those that keep the site working and record your cookie choices, are set without asking. Everything else is blocked until you agree to it.
We use Cookie Script to manage this. You will see the banner on your first visit, and you can change your mind at any time using the Cookie Settings link at the bottom of every page.
The non-essential categories we use are:
- Analytics. Google Analytics 4 and Microsoft Clarity, to understand how the site is used. Clarity also records anonymised session replays and heat maps.
- Marketing. The Meta pixel, so we can measure and target advertising on Facebook and Instagram.
- Functional. HubSpot, which links form submissions to the visit they came from so we know where enquiries originate.
Google Tag Manager is the container that loads these. It does not collect anything on its own account, and it only fires a tag once you have consented to that category.
Two things we do that you will not see. Our fonts are hosted on our own server rather than loaded from Google, so visiting this site does not send your IP address to Google Fonts. And our forms are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a bot. Turnstile processes your IP address and some technical signals from your browser to make that judgement. It is a security measure rather than a tracking one, so it runs on all visits.
You can also control cookies in your browser settings, though blocking strictly necessary ones may stop parts of the site working.
Who we share information with
We do not sell your information and we do not share it for anyone else's marketing.
We use the following suppliers, who process information on our behalf under contract:
| Supplier | What they do |
|---|---|
| Webflow | Hosts this website and processes form submissions |
| Analytics 4, Tag Manager, Search Console, and our email storage | |
| Microsoft | Clarity behavioural analytics |
| Meta | Advertising and measurement |
| HubSpot | Forms and email marketing |
| Cloudflare | Turnstile spam protection and DNS |
| Cookie Script | Consent management |
We will also disclose information where the law requires it, or where we need to establish or defend a legal claim.
Sending information outside the UK
Several of the suppliers above are based in the United States or store data there. Where information is transferred outside the UK, we rely on one of the safeguards UK law allows: the UK extension to the EU–US Data Privacy Framework where the supplier is certified under it, or the International Data Transfer Agreement or UK Addendum to the standard contractual clauses where it is not.
How long we keep it
- Enquiries that do not become work: two years from your last contact with us, then deleted.
- Marketing contacts: until you unsubscribe or ask us to remove you, and we review the list every three years regardless.
- Website analytics: Google Analytics 4 is set to keep user-level data for 14 months. Microsoft Clarity keeps session recordings for 30 days, and click and heat map data for up to 13 months, under Microsoft's own retention policy.
- Server and security logs: we do not have access to raw server logs for this website. Webflow and Cloudflare keep their own operational and security logs under their own retention policies, which we do not control.
Where we no longer need to identify you, we may keep aggregated statistics that cannot be traced back to you.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- have inaccurate information corrected
- have information deleted, in some circumstances
- restrict or object to how we use it, including objecting to direct marketing at any time
- receive information you gave us in a portable format
- withdraw consent, where consent is what we are relying on
To exercise any of these, email info@webcetera.co.uk. We will respond within one month. There is no charge unless a request is clearly unfounded or excessive. We may ask you to confirm your identity first.
Complaining to us
If you think we have mishandled your personal information, tell us and we will look into it.
You can complain using our contact form, by emailing info@webcetera.co.uk, or by writing to us at the address at the top of this page. Any route is fine, and we will treat it as a complaint however it reaches us. It helps if you say that it is a data protection complaint, so it reaches the right person straight away.
We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, keep you posted on progress, and tell you the outcome and what we have done about it.
Complaining to the ICO
If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office. We would ask you to come to us first so we get the chance to put it right.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
0303 123 1113 | ico.org.uk
Security
We take sensible steps to protect the information we hold, including access controls, two-factor authentication on our systems, encryption in transit, and suppliers chosen partly for their security posture. No system is completely secure and we will not pretend otherwise, but we take the responsibility seriously.
Changes to this policy
We review this policy at least once a year and whenever we change the tools we use. The date at the top tells you when it last changed. We will flag material changes on the site.