Policies

Privacy policy

Last updated 6 October 2026

This policy explains what personal information eCommWeb Limited collects when you use this website, why we collect it, what we do with it, and the rights you have over it under UK data protection law.

It covers www.ecommweb.co.uk and the enquiries and services that come through it. It is written to be read, not to be waded through — if anything here is unclear, ask us and we will explain it.

Who we are

eCommWeb Limited is a company registered in England and Wales, company number 06680782, with its registered office at 1 Measures Close, Morton, Bourne, PE10 0NJ.

For the purposes of the UK GDPR and the Data Protection Act 2018, eCommWeb Limited is the data controller for the information described in this policy. That means we decide what is collected and what happens to it, and we are accountable for it.

What we collect

Information you give us

When you fill in the enquiry form on our contact page, email us or ring us, we collect what you choose to tell us. Through the form that is:

  • Your name
  • Your email address
  • Your phone number, if you give us one
  • What your enquiry is about, and whatever you write in the message

If you go on to become a client, we will also hold the information we need to do the work and to invoice you — typically a business address, billing contact and the details of the services we run for you.

Information collected automatically

Like most websites, ours records some technical information about visits: the pages you looked at, roughly where in the world you were, which browser and device you used, and how you arrived. We use this to understand which pages are useful and which are not.

We use Google Analytics for this. It sets cookies in your browser and sends usage data to Google, who act as our data processor. You can opt out across every site that uses it with Google’s browser add-on.

What we do not collect

This website has no customer accounts, no login and no shop, so we do not collect passwords or take payments through it. If you pay us by Direct Debit, your bank details are given to GoCardless rather than to us — we never see or store them.

Why we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for using your information. Ours are:

  • To answer your enquiry. Our legitimate interest in responding to someone who has contacted us, and, where you are asking us to quote, taking steps at your request before entering into a contract.
  • To carry out work for you and invoice you. Performance of our contract with you.
  • To keep records we are obliged to keep, such as accounting records. Compliance with a legal obligation.
  • To understand how the website is used. Your consent, given through the cookie choice in your browser, and our legitimate interest in improving the site.

We do not sell your information, and we do not use it to build a profile of you or to make automated decisions about you.

Marketing

We may occasionally email existing clients about services closely related to the work we already do for them. Every such email has an unsubscribe link, and you can tell us to stop at any time by replying or emailing support@ecommweb.co.uk. We do not add people who have simply made an enquiry to a marketing list.

Who we share it with

We do not sell, rent or trade your personal information. We share it only where we need to:

  • Suppliers who process it on our behalf, such as our email provider, our hosting and server suppliers, and Google Analytics. They act on our instructions and are bound to keep it secure.
  • Our accountants, for invoices and records.
  • Anyone we are legally required to share it with, such as a court or a regulator responding to a valid request.

If the business were ever sold or transferred, client information would pass to the buyer, who would be bound by this policy until they told you otherwise.

Where your information is held

We host in the UK and the EU wherever we can. Some of our suppliers — Google Analytics in particular — may process data outside the UK. Where that happens, the transfer is covered by the safeguards UK law requires, such as an adequacy decision or the International Data Transfer Agreement.

How long we keep it

  • Enquiries that do not become work: up to two years, then deleted. People often come back to us a year or two later, and it saves you repeating yourself.
  • Client records: for as long as we work together, and then for seven years after the last invoice, which is how long we are required to keep accounting records.
  • Website analytics: retained by Google for the period set on our account, currently 14 months.

Keeping it safe

This website is served over HTTPS, so anything you send through it is encrypted in transit. Access to our systems is limited to the people who need it and protected by strong, unique passwords and two-factor authentication where it is available. No system is perfectly secure, but we take this seriously — it is, after all, what our clients pay us to do for them.

Cookies

A cookie is a small file a website asks to store in your browser. This site uses them for two things: keeping the site working as you move around it, and the Google Analytics measurement described above.

You can block or delete cookies in your browser settings. Blocking the analytics ones makes no difference to how the site works for you.

Your rights

Under UK data protection law you have the right to:

  • Ask what personal information we hold about you, and get a copy of it.
  • Have anything inaccurate or incomplete corrected.
  • Ask us to delete it, where we have no continuing reason to keep it.
  • Ask us to restrict how we use it while a question about it is resolved.
  • Object to us using it on the basis of legitimate interests, and to direct marketing at any time.
  • Ask for it in a portable, machine-readable format, or have it sent to someone else.
  • Withdraw your consent, where consent is what we relied on.

To exercise any of these, email support@ecommweb.co.uk or write to us at the address below. There is no charge, and we will respond within one month. We may ask you to confirm who you are first.

Complaints

If you are unhappy with how we have handled your information, please tell us first — most things are a misunderstanding we can sort out quickly. If you are still not satisfied, you can complain to the Information Commissioner’s Office, the UK regulator for data protection:

  • Online at ico.org.uk/make-a-complaint
  • By phone on 0303 123 1113
  • By post to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Other websites

This site links to other websites. Once you follow one of those links you are on someone else’s site, governed by their privacy policy rather than ours, and we have no control over what they do. It is worth a look before you hand over anything personal.

Changes to this policy

We update this policy when what we do changes. The date at the top shows when it was last revised. If we ever make a change that materially affects how we use information you have already given us, we will tell you directly.

How to contact us

See also our terms and conditions and service level agreement.