Webtree Limited ("we", "our", or "us") is committed to protecting your personal data and upholding strict data protection standards in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy outlines how we handle personal data collected through our website (webtree.co.uk).
1. Data Controller Information
Webtree Limited is a company registered in England and Wales (company number: 06438702).
Registered Address: Castle Chambers, 6 Westgate Hill, Pembroke, Pembrokeshire, SA71 4LB, United Kingdom
Data Protection Contact: Reveal email address
2. Information We Collect
Because our website is constructed as a static, privacy-focused platform, we collect minimal personal data:
Contact & Discovery Inquiries: When you submit an inquiry or project brief via our intake forms, we collect your name, corporate email address, organisation name, phone number (if provided), and any technical details included within your message.
Server Logs & Security Data: Our hosting network automatically processes standard web server logs (such as IP addresses, browser types, and access timestamps) strictly for network security, DDoS prevention, and system stability monitoring.
3. How We Use Your Data
We process personal data submitted via our website under the lawful basis of legitimate business interest and pre-contractual steps:
- To evaluate engineering inquiries, project scopes, and audit requests.
- To respond to direct communications from prospects, clients, and partners.
- To fulfil legal and regulatory duties associated with operating a UK limited company.
We do not sell, rent, trade, or monetise your personal data under any circumstances.
4. Third-Party Data Processors
To deliver a secure and reliable web experience, we use vetted infrastructure processors operating under strict data protection protocols:
Hosting & CDN Infrastructure: Netlify, Inc. (Processes web requests and form submission payloads securely via global CDN nodes).
Email Infrastructure: MXRoute (Processes incoming and outgoing corporate email routing).
All third-party processing partners operate under secure data transfer mechanisms and strict non-disclosure obligations.
5. Cookies & Tracking Technologies
This website operates without non-essential tracking cookies.
We do not use third-party advertising pixels, behavioural remarketing cookies, or cross-site tracking scripts.
We do not display intrusive cookie consent banners because we do not store non-essential user tracking files on your device.
6. Data Retention & Security
We maintain administrative, technical, and physical safeguards to protect your personal data against unauthorised access, loss, or alteration. Inquiries submitted through our website are retained only as long as necessary to fulfil the operational purpose of the communication or to comply with statutory accounting and legal retention periods.
7. Your Statutory Rights
Under UK data protection law, you have the following rights regarding your personal information:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to statutory record-keeping requirements.
- Right to Object: Object to our processing of your personal data based on legitimate interests.
To exercise any of these rights, please contact our team at Reveal email address. If you believe your data has been handled incorrectly, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.