Privacy Policy

In this policy, WEBDIGITA, "we", "us", and "our" represent Webdigita Limited. "User" and "visitor" refer to you.

Data controller: Webdigita Limited (Company No. 15885555), 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.

ICO registration: We are registered with the UK Information Commissioner's Office (ICO) as a data controller (registration reference: ZB906103). Registration date: 31 May 2025. Registration expires: 30 May 2026.

At Webdigita, we are committed to protecting your personal data while you visit our website. This privacy policy explains when, why, and what data we collect from our visitors, how we use this data, and how we protect it. We share personal data with trusted service providers (processors) where needed to operate our website, provide services, and run our business. We do not sell your personal data.

This policy may be updated at any time, so please check this page regularly. Last updated: 14 February 2026.

If you have any queries related to your personal data or our privacy practices, please email us at [email protected].

What Do We Do With the Data We Gather

We may collect the following data from users through our contact forms:

Full name
Company name
Company website URL
Email address
Phone number
Message
Project Requirements
IP Address

We will not collect more information than we need for the purposes set out in this policy. Please do not submit special category data (for example health, religious beliefs, or biometrics) through our forms.

If you apply for a role or submit a CV, we may also collect the information you provide in your application materials (such as your CV, work history, qualifications, and availability).

When Do We Collect the Data

We collect data when you submit it through our contact forms, live chat and chat bots.

What Do We Do With Your Personal Data

We may use your personal data submitted through our website for the following purposes:

Administering our website and internal business purposes
Personalising our website for you
Providing you with the information about our services that you request
Communicating with you regarding the services you've requested and responding to your questions and comments
Sending you email notifications that you have specifically requested
Sending you our email newsletter, if we have your consent (you can inform us at any time if you no longer require the newsletter)
Providing third parties with statistical information about website usage (these third parties will not be able to identify any individual user from the information provided)
Verifying compliance with our website terms and preventing misuse of our services
Keeping our website safe, secure, and preventing fraud or illegal activities

Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, remember preferences, measure performance, and support marketing (where enabled).

Some cookies and similar technologies may be set when you load our website.

You can control cookies through your browser settings and device controls. You can also use tools provided by third parties (for example, Google’s opt-out mechanisms) where available.
Our site may use tools such as Google Analytics (GA4), Google Tag Manager, Microsoft Clarity, and other marketing/CRM tools to measure usage and campaign performance.

Personal Data Shared with Third Parties

We may share your data with:

Our trading names / brands operated by Webdigita Limited (where relevant)
Law enforcement or fraud prevention agencies if we believe the supplied data may violate a law
Professional service providers, such as IT providers, professional advisers, or subcontractors as reasonably necessary for the purposes set out in this policy

Some services may be marketed under different brand names. Where this happens, the data controller remains Webdigita Limited.

Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

Consent: When you have given us explicit consent to process your data for specific purposes.
Contract: When processing your data is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, provided these interests do not override your rights and freedoms.

Where we rely on legitimate interests, these typically include responding to enquiries, improving our website and services, preventing fraud, and running our business efficiently. You can object to processing based on legitimate interests in certain circumstances.

Our website includes hyperlinks to, and details of, third-party websites. We have no control over third parties and are not responsible for the content on their website or how they manage your data. Please refer to their privacy policies for more information.

We may share your data in such circumstances: in order to establish, exercise, or defend our legal rights, and in connection with any ongoing or prospective legal proceedings.

International Data Transfers

We may transfer personal data outside the UK (for example, where our suppliers or delivery team are located overseas). Where we do, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or we transfer to countries recognised as providing an adequate level of protection.

How Long We Retain Your Personal Data

We retain personal data only for as long as necessary for the purposes set out in this policy:

Enquiries and sales discussions: typically up to 24 months from last contact.
Client delivery records and contracts: typically up to 6 years from contract end (for legal, tax, and audit purposes).
Marketing: until you unsubscribe or withdraw consent.
Security and access logs: typically up to 12 months unless required longer for investigations.

Secure Data Protection

In order to prevent unauthorised access or disclosure, we have put technical and operational processes in place to keep your data safe. Webdigita also uses SSL encryption to transmit information from end users to our hosted servers.

Personal Data Breaches

If a personal data breach occurs, we will assess the risk to individuals. Where required by law, we will notify the UK Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, and we will notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

Your Rights to Your Personal Data

You have rights in relation to your personal data under UK data protection law. If you would like to make a request, please email [email protected].

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your personal data.

We may need to verify your identity before responding. We aim to respond within one month, although this may be extended in complex cases.

We do not usually charge for requests. We may charge a reasonable fee or refuse a request only where it is manifestly unfounded or excessive.

The right to be informed: Our privacy policy and website terms at the time of capturing your personal data disclose how we are using your personal data.
The right to access: You have the right to access the personal data we process and other information such as the purpose of processing, who your data has been or will be disclosed to, etc. In most cases, this is free of charge; however, there may be some charges if the request is excessive and made numerous times.
The right to rectification: You can ask for the rectification of your personal data if you believe the data in our possession is inaccurate.
The right to removal: We are obligated to remove your personal data from our records without undue delay if you request its removal. If it's not possible for us to remove your personal data or we need to retain it, we will inform you why we cannot process your request.
The right to data portability: You can request a copy of your personal data in a machine-readable format and have the right to transmit the data to another controller.
The right to object: You can object to processing where we rely on legitimate interests or where we process your data for direct marketing.
The right to restrict processing: You can ask us to limit how we use your personal data in certain circumstances.

Protecting Your Data

We are aware of the requirement to ensure your data is protected against accidental loss or disclosure, destruction, and abuse. We have implemented processes to guard against such risks.

We do not use automated decision-making or profiling that produces legal or similarly significant effects for individuals.

Recruitment and Candidate Data

If you apply for a role via our website (including through contact forms), we will process your personal data to assess your application, communicate with you, and manage our recruitment process. This may include your name, contact details, CV/application materials, work history, and any information you choose to share.

Legal basis: we process candidate data to take steps at your request prior to entering into a contract, to enter into an employment/engagement contract where applicable, and for our legitimate interests in running a fair and efficient recruitment process. Where we ask for consent (for example, to keep your details on file for future roles), you can withdraw it at any time.

If we operate a recruitment service for clients, we will only share candidate details with a client where you have requested or agreed to be represented, or where we have another lawful basis to do so. We will provide additional role-specific information at the point of submission where required.

Where we submit your details to a client, we will normally do so only after you have requested or confirmed that you want to be represented for that opportunity.

Retention:

Unsuccessful applications: typically up to 6 months after we have communicated the outcome of your application, unless we ask for and you provide consent to keep your details for longer.
Talent pool (with consent): typically up to 9 months, or until you withdraw consent.
Successful applications: your data will be transferred to our internal systems used for onboarding and ongoing engagement. A separate employee/contractor privacy notice will apply.