Legal

Privacy Policy

Last updated: January 2026

Introduction

Web Cardiff ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at webcardiff.co.uk or use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Fill out a contact form on our website
  • Request a quote for our services
  • Subscribe to our newsletter
  • Engage our services for web design, hosting, or maintenance

This information may include:

  • Name
  • Email address
  • Phone number
  • Business name
  • Website URL
  • Billing information (when engaging our services)

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referring website
  • Date and time of visit

How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and provide customer support
  • Provide, operate, and maintain our services
  • Send you quotes, invoices, and service-related communications
  • Improve our website and services
  • Analyse website usage to understand how visitors interact with our site
  • Send marketing communications (with your consent)
  • Comply with legal obligations

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

We use the following types of cookies:

  • Essential cookies: Required for the website to function properly
  • Analytics cookies: Help us understand how visitors interact with our website (Google Analytics)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

Google Analytics

We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered is used to create reports about the use of our website.

Google's privacy policy is available at: https://policies.google.com/privacy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using personal information depends on the information concerned and the context in which we collect it. We may process your personal information because:

  • We need to perform a contract with you
  • You have given us consent to do so
  • The processing is in our legitimate interests and not overridden by your rights
  • We need to comply with the law

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. For client data, we typically retain records for 6 years after the end of our business relationship for tax and legal purposes.

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service providers: We may share information with third-party service providers who perform services on our behalf, such as hosting providers, payment processors, and email services
  • Legal requirements: We may disclose your information where required by law or subpoena
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

Your Rights

Under UK GDPR, you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you
  • Right to rectification: You can ask us to correct inaccurate or incomplete data
  • Right to erasure: You can ask us to delete your personal data in certain circumstances
  • Right to restrict processing: You can ask us to restrict the processing of your data
  • Right to data portability: You can ask us to transfer your data to another organisation
  • Right to object: You can object to processing based on legitimate interests or direct marketing

To exercise any of these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to read the privacy policy of every website you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Web Cardiff

Email: [email protected]

Phone: 02921 444 956

Cardiff, Wales, UK

Supervisory Authority

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.