Privacy Notice

Who we are

This notice explains how Webd Ltd uses personal data when you visit webd.uk, contact us through it, buy a plugin upgrade or another item, make a voluntary support payment, or receive support or web services through an enquiry made on the site.

Webd Ltd is the controller for the processing described in this notice. We are registered in England and Wales under company number 12518645. Our registered office is 26 High Street, Battle, East Sussex, TN33 0EA, United Kingdom.

What we collect and why

Enquiries, support and project work. We use your name, contact details, messages and any details needed to quote for or carry out web design, development or maintenance. We use this information to take steps you request before entering into a contract and to deliver our contract with you. For general enquiries or correspondence with someone acting for a client, we rely on our legitimate interests in responding and managing our business relationships.

Orders and voluntary support payments. We use your contact and billing details, order details and payment references to process transactions, provide plugin upgrades, send confirmations and handle refunds or support. For purchases we rely on performance of our contract with you. For voluntary support payments we rely on our legitimate interests in administering and recording those payments. We retain transaction and invoice information as needed to comply with tax and accounting obligations.

Security and fraud prevention. We may use IP addresses, browser and device information, request logs and payment risk signals to operate the site securely, prevent spam and abuse, and investigate fraud. We rely on our legitimate interests in protecting the site, its visitors and transactions.

Website statistics. We use Matomo, hosted on the same UK server as webd.uk, to understand which pages are used and improve the site. It can receive information such as the pages visited, the referring page and browser or device details. Where this involves personal data, we rely on our legitimate interests in understanding and improving the site. You can object using the control below.

If you choose to contact us or make a purchase, we need enough information to reply, complete the transaction or provide the service you requested.

Cookies and similar technologies

Basket. WooCommerce uses woocommerce_cart_hash and woocommerce_items_in_cart during your browser session to keep your basket up to date. Depending on the checkout flow, it can also use a wp_woocommerce_session_ cookie to retrieve a guest basket, normally for up to two days.

Payments. Stripe collects payment details and may use device and interaction information to help prevent fraud. In testing, its fraud-prevention cookies __stripe_sid, __stripe_mid and m lasted about 30 minutes, one year and 13 months respectively. The payment options available at checkout can include Stripe Link, Apple Pay and Google Pay. These services may use browser storage to check availability, recognise a payment session or authenticate you. See Stripe’s Cookie Policy, Apple Pay & Privacy and Google Payments’ Privacy Notice.

Bot protection. hCaptcha, provided by Intuition Machines, Inc., may run when a page loads, including in the background. It uses information such as your IP address and interactions with the page to help detect bots and abuse. Its cookies can include __cf_bm for bot protection, __cflb for routing, and hmt_id for technical purposes such as accessibility support and service statistics. See the hCaptcha Privacy Policy for its cookie disclosures.

Matomo analytics. Matomo’s analytics cookies are disabled. You can turn off Matomo measurement in this browser using the control below. Matomo may use a cookie to remember your choice. Clearing site data or switching browsers may mean you need to set your choice again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

You can also clear or block cookies in your browser settings. Blocking cookies may affect the basket, checkout or protected forms.

Who receives personal data

We use providers for website hosting, email, backups and accounting support. They receive information as needed for those services. We may also disclose information to professional advisers, tax authorities, regulators or other public bodies where necessary to comply with the law or deal with legal claims.

Stripe handles payments and fraud prevention. If you use a wallet, the relevant wallet provider also handles information for that payment method. Intuition Machines provides hCaptcha for bot and abuse protection. See Stripe’s Privacy Policy and the hCaptcha Privacy Policy.

Our website, email and backups are hosted in the UK. Payment and security providers may process data outside the UK, including in the United States. Stripe and hCaptcha describe safeguards including standard contractual clauses with the UK Addendum, where applicable. You can ask us for details or a copy of the safeguards that apply to a transfer. See the Stripe Privacy Center and hCaptcha’s data protection information.

How long we keep information

We decide how long to keep information according to why we collected it. For enquiries, we consider whether the conversation is ongoing or follow-up is needed. For orders, projects and support, we consider how long we need the information to deliver the service, handle refunds or support, and resolve disputes. We keep invoices and accounting records for the applicable statutory periods.

For security logs and detailed analytics data, we consider how long the information is needed to investigate incidents or produce website statistics. Cookie lifetimes are separate from the time we or our providers retain records.

Your rights

Depending on the circumstances, you can ask for access to your personal data, ask us to correct or delete it or restrict its use, or ask for a portable copy of information you provided. Where we rely on consent, you can withdraw it at any time.

Right to object. You can object to processing based on our legitimate interests. For Matomo, you can also use the control in the cookies and similar technologies section.

You can make a privacy request or a data protection complaint using the details below. You can also complain to the Information Commissioner’s Office (ICO) or call it on 0303 123 1113.

Contact us about privacy

Use our contact form or write to Webd Ltd, 26 High Street, Battle, East Sussex, TN33 0EA, United Kingdom. Please indicate whether you are making a privacy request or a data protection complaint so we can direct it appropriately.