Privacy Policy

Who we are

This website is operated by Weldon Web Ltd, a company registered in England and Wales (company number 10988760). Weldon Web Ltd is the data controller for personal data collected through this website. Contact: jack@weldonweb.co.uk.

What we collect on this website

Contact form. When you submit the contact form we collect your name, email address, and message, plus the IP address the submission came from (used solely to rate-limit abuse). Submissions are stored in our content management system and may be forwarded to our internal notification channel. We use them to respond to your enquiry and for no other purpose.

Email. If we correspond by email, we hold that correspondence for as long as it stays relevant to the relationship.

Analytics. We use Vercel Analytics and Google Analytics to understand aggregate site usage (pages visited, approximate location, device type). Google Analytics sets cookies. We do not use advertising trackers and we do not sell or share visitor data for marketing.

What the Sovara products process

Sovara Browser. The policy check runs locally in your browser; message text is never transmitted for the check. The backend stores metadata only — which detector fired, on which site, at what time, for which seat — encrypted, in Azure UK South, with managed backups. It never stores message text. Details are on the Sovara Browser page.

Sovara Gateway. The gateway deploys into your own environment. Audit events, request payloads, and policy configuration stay in your infrastructure; Weldon Web has no access to them unless you grant it. Details are on the security page.

Legal bases and retention

We process contact enquiries on the basis of legitimate interest (responding to a message you sent us) or, where relevant, steps taken toward a contract. Analytics is processed on the basis of consent and legitimate interest in understanding site usage.

Contact submissions are kept for as long as the enquiry or relationship stays active, then deleted on periodic review. Rate-limiting IP data is transient. Analytics data is retained per the retention settings of the analytics providers.

Who we share data with

We use a small set of processors to run this website: Vercel (hosting and analytics), Google (analytics), Microsoft Azure (database, file storage, and the Sovara backend — UK South region), and Resend (transactional email). Each processes data on our instructions under their standard data-processing terms.

We do not sell personal data. We disclose it only if required by law.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or restrict the personal data we hold about you, object to processing based on legitimate interest, and ask for a portable copy. Email jack@weldonweb.co.uk and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We will update this page when our practices change and revise the date at the top. Material changes to how the products handle data are announced on the product pages, not buried here.