Privacy Policy

Who we are

This website is operated by Weldon Web Ltd, a company registered in England and Wales (company number 10988760). Weldon Web Ltd is the data controller for personal data collected through this website. Contact: jack@weldonweb.co.uk.

What we collect on this website

Contact form. When you submit the contact form we collect your name, email address, and message, plus the IP address the submission came from (used solely to rate-limit abuse). Submissions are stored in our content management system and may be forwarded to our internal notification channel. We use them to respond to your enquiry and for no other purpose.

Email. If we correspond by email, we hold that correspondence for as long as it stays relevant to the relationship.

Analytics. We use Vercel Analytics and Google Analytics to understand aggregate site usage (pages visited, approximate location, device type). Google Analytics sets cookies. We do not use advertising trackers and we do not sell or share visitor data for marketing.

Services and engagements

Personal data processed during consulting engagements is handled under the contract or data-processing agreement for that engagement, not through this website. Work happens in client-owned systems wherever possible, and client data is not copied off client systems unless a deliverable requires it and it is agreed in writing. How that works in practice is described on the security page.

Legal bases and retention

We process contact enquiries on the basis of legitimate interest (responding to a message you sent us) or, where relevant, steps taken toward a contract. Analytics is processed on the basis of consent and legitimate interest in understanding site usage.

Contact submissions are kept for as long as the enquiry or relationship stays active, then deleted on periodic review. Rate-limiting IP data is transient. Analytics data is retained per the retention settings of the analytics providers.

Who we share data with

We use a small set of processors to run this website: Vercel (hosting and analytics), Google (analytics), Microsoft Azure (database and file storage - UK South region), and Resend (transactional email). Each processes data on our instructions under their standard data-processing terms.

We do not sell personal data. We disclose it only if required by law.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or restrict the personal data we hold about you, object to processing based on legitimate interest, and ask for a portable copy. Email jack@weldonweb.co.uk and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We will update this page when our practices change and revise the date at the top.