← Back to Home

Privacy Policy

Last updated: 20 November 2025

1. Introduction

WebPunch ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website webpunch.co.uk (the "Website") and our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: WebPunch, Aberdeen, Scotland, UK

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

  • Fill out our contact form
  • Create a client account
  • Send us messages through the client dashboard
  • Subscribe to our newsletter or communications
  • Request a quote or consultation

This information may include:

  • Name and contact details (email address, phone number)
  • Business name and details
  • Project requirements and specifications
  • Login credentials (username and encrypted password)
  • Any other information you choose to provide

2.2 Information We Collect Automatically

When you visit our Website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on pages
  • Referring website addresses
  • Date and time of visits

2.3 Cookies and Similar Technologies

We use cookies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookies Policy.

3. How We Use Your Information

We process your personal data for the following purposes:

Purpose Legal Basis (UK GDPR)
To respond to your enquiries and provide quotes Legitimate interests / Contract
To provide web design and development services Contract performance
To manage your client account and dashboard access Contract performance
To communicate about your project Contract performance
To send marketing communications (with consent) Consent
To improve our Website and services Legitimate interests
To comply with legal obligations Legal obligation

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

  • Service Providers: We may use trusted third-party service providers (e.g., hosting providers, email services) who process data on our behalf
  • Legal Requirements: If required by law, court order, or governmental authority
  • Business Transfers: In the event of a merger, acquisition, or sale of assets
  • With Your Consent: When you have given explicit permission

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including:

  • Secure server infrastructure with SSL/TLS encryption
  • Password encryption using industry-standard hashing
  • Regular security updates and monitoring
  • Access controls and authentication measures
  • Regular data backups

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

  • Client data: Retained for the duration of our business relationship and up to 7 years after for legal and accounting purposes
  • Contact form enquiries: Retained for up to 2 years if no business relationship is established
  • Marketing communications: Until you unsubscribe or withdraw consent
  • Website analytics: Typically 14-26 months

7. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

7.1 Right of Access

You can request a copy of the personal data we hold about you.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances.

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations.

7.5 Right to Data Portability

You can request your data in a portable format to transfer to another service.

7.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

7.7 Right to Withdraw Consent

Where we rely on consent, you can withdraw it at any time.

7.8 Right to Lodge a Complaint

You can complain to the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at hello@webpunch.co.uk

8. International Data Transfers

Your data is primarily stored and processed within the United Kingdom. If we need to transfer data outside the UK/EEA, we will ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the UK authorities
  • Adequacy decisions recognising equivalent data protection standards
  • Your explicit consent

9. Children's Privacy

Our Website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Marketing Communications

We will only send you marketing communications if you have:

  • Given explicit consent, or
  • Provided your details in the context of a business relationship (soft opt-in)

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or contacting us directly.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on this page with a new "Last updated" date.

We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

  • Email: hello@webpunch.co.uk
  • Address: Aberdeen, Scotland, UK
  • Website: webpunch.co.uk

15. Information Commissioner's Office (ICO)

If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 0303 123 1113
Website: www.ico.org.uk

Return to Homepage