Privacy Policy

InFrontWebs Ltd ("InFrontWebs", "we", "us", "our") is a technology and AI engineering agency registered in England and Wales. Our registered office is in the United Kingdom. We are the data controller for personal information collected through infrontwebs.com.

If you have any questions about this policy or your personal data, contact us at hello@infrontwebs.com.

We collect the following categories of personal information:

Information you provide directly:

- Name and email address (via contact forms)

- Company name and job title (optional, via contact forms)

- Project details and budget information you submit

- Communications you send to us by email

Information collected automatically:

- IP address and approximate location (country/city level)

- Browser type and operating system

- Pages visited and time spent on site

- Referral source (how you arrived at our site)

We do not collect payment card details — any payments are processed directly through third-party providers (such as Stripe) under their own privacy policies.

We use your personal information for the following purposes:

- To respond to enquiries: When you contact us via the website form or email, we use your information to reply and assess your project requirements.

- To fulfil contracts: If you engage us for a project, we use your information to deliver services, send invoices, and communicate throughout the engagement.

- To improve our service: Anonymised usage data helps us understand which pages are most useful and where we can improve.

- To send occasional updates: Only if you have explicitly opted in. You can unsubscribe at any time.

We do not use your data for automated decision-making or profiling.

Under UK GDPR, we rely on the following legal bases:

- Legitimate interests — responding to enquiries, improving our website, and communicating with prospective clients.

- Contract performance — processing data necessary to deliver agreed services.

- Consent — for any marketing communications, where we have explicitly requested and received your consent.

- Legal obligation — retaining records as required by UK law (e.g. accounting records for six years).

We do not sell, rent, or trade your personal data to any third party.

We share data only with:

- Service providers who help us operate the business (e.g. email hosting, form processing via Formspree, analytics). These providers are contractually bound to protect your data and may not use it for their own purposes.

- Legal authorities if required to do so by law or in response to valid legal process.

All third-party providers we use are assessed for GDPR compliance.

We use a minimal number of cookies:

- Essential cookies: Required for basic site functionality. Cannot be disabled.

- Analytics cookies: We use privacy-first analytics to understand site usage in aggregate, anonymised form. No personally identifiable data is tracked or stored.

We do not use advertising or tracking cookies. You can control cookies through your browser settings at any time.

We retain personal data only for as long as necessary:

- Enquiry and contact form data: 2 years from last contact, unless a project engagement follows.

- Client project data: 6 years from project completion (as required for accounting and legal purposes).

- Analytics data: Aggregated and anonymised — no individual retention limit applies.

After the retention period, data is securely deleted or anonymised.

Under UK GDPR, you have the following rights regarding your personal data:

- Right of access — request a copy of the data we hold about you

- Right to rectification — ask us to correct inaccurate data

- Right to erasure — ask us to delete your data in certain circumstances

- Right to restrict processing — ask us to limit how we use your data

- Right to data portability — receive your data in a machine-readable format

- Right to object — object to processing based on legitimate interests

To exercise any of these rights, email hello@infrontwebs.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take data security seriously. Measures we have in place include:

- All data transmitted via HTTPS/TLS encryption

- Access controls limiting who can access personal data internally

- Regular review of third-party service providers for security compliance

- No storage of sensitive financial information on our own systems

No transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at hello@infrontwebs.com.

This Privacy Policy is governed by the laws of England and Wales and is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy was last updated on 1 April 2025. We reserve the right to update this policy at any time. Significant changes will be communicated via our website.