Privacy
policy.

1. Who we are

This website is run by WEBARROW LTD, trading as WEBARROW. We are the data controller for the personal information described in this policy. You can contact us about anything in this policy at:

2. What we collect

• Enquiries: when you use a form on this website we collect your name, email address, business name (optional), the service you’re interested in, your budget and timing (optional), your message and the page you sent it from.
• Technical information: the IP address the enquiry was sent from, which we use to stop spam and abuse of our forms.
• Clients: if you become a client, we also hold your contact and billing details (such as address and phone number), quotes, invoices and payment records, and our correspondence with you.
• Accepting a quote online: if you accept a quote through the link we send, we record the name you type and the date and time you accepted.

3. How we use it, and our lawful basis

• To reply to your enquiry and prepare a quote: taking steps at your request before entering a contract, and our legitimate interest in responding to people who contact us.
• To deliver our services, issue invoices and manage your account: performance of our contract with you.
• To keep accounting and tax records: our legal obligations.
• To protect our website and forms from spam and misuse: our legitimate interests.

We will not send you marketing emails unless you have asked us to, and you can opt out at any time. We do not sell your personal information.

4. Who we share it with

We only share your information with service providers who help us run our business, under contracts that require them to protect it:

• Our website and database hosting provider (currently Railway).
• Our email provider, which delivers our emails to you.
• Google Fonts, which supplies the typeface on this website. Your browser requests the font files directly from Google, which receives your IP address.
• Our accountant, and HMRC where the law requires it.

Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to keep your information protected.

5. How long we keep it

• Enquiries that don’t lead to a project: up to 24 months, then deleted.
• Client, quote and invoice records: 6 years after the end of the financial year they relate to, as required for tax purposes.

6. Cookies

When you first visit, we ask whether you accept optional cookies. We remember your answer in one essential cookie (wa_consent, kept for 6 months), so we don’t ask again on every page. You can change your choice at any time using “Cookie settings” at the bottom of any page.

The public pages of this website do not currently use analytics or advertising trackers. If we add any in future, they will only run if you choose “Accept all”, and we will list them here. Our private team portal uses essential cookies only to keep staff signed in.

7. Your rights

Under UK data protection law you have the right to ask for a copy of your personal information, and to have it corrected or deleted. You can also ask us to restrict how we use it, object to our using it, or ask us to transfer it to you or another organisation. Email [email protected] and we will respond within one month.

If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.