Privacy Policy

1. Who we are

Inter Web Services Ltd(“we”, “us”, “our”) is a private limited company registered in England and Wales, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. For personal data we collect through this website and our own business activities, we are the data controller. Where we process personal data on behalf of a client as part of a project, we act as a data processor on that client’s documented instructions.

For any privacy question, or to exercise your rights, contact us at sales@interwebservices.co.uk.

2. What data we collect

Information you give us

• Name, work email address, and organisation name
• The content of your enquiry, including any budget or timeline information you choose to share
• Correspondence, meeting notes, and documents exchanged during an engagement
• Billing and contractual details where we enter into an agreement

Information collected automatically

This website does not use advertising or cross-site tracking cookies. Where we or our hosting provider collect technical information such as IP address, browser type, requested pages, and timestamps, this is for security, abuse prevention, and aggregate performance measurement. See our Cookie Policy for detail.

Client data processed on instruction

During a project we may access personal data held within a client’s systems — for example when migrating data, diagnosing a fault, or building a feature. We access the minimum necessary, only for the purpose instructed, and under a written data processing agreement. We do not use client data for our own purposes.

3. Why we process it, and our lawful basis

• To respond to your enquiry — legitimate interests, and steps preparatory to entering a contract.
• To deliver contracted services — performance of a contract.
• To operate and secure our systems — legitimate interests in maintaining a secure service.
• To meet accounting and legal obligations — compliance with a legal obligation.
• To send occasional service updates — consent, which you may withdraw at any time.

We do not sell personal data, and we do not carry out automated decision-making that produces legal effects concerning you.

4. Enquiry form and email

The enquiry form on this website does not transmit your details to a server we control. It composes a message in your own email client for you to review and send. Nothing is stored by this website unless you choose to send that email, at which point the message is held in our business email system.

5. Sharing your information

We share personal data only where necessary, and under contract, with:

• Service providers who support our operations — email and productivity platforms, hosting and cloud infrastructure, accounting software, and project management tools
• Professional advisers such as accountants, insurers, and legal counsel where required
• Subcontractors engaged on a project, subject to equivalent confidentiality and security obligations
• Regulators, law enforcement, or courts where we are legally required to do so

A current list of sub-processors used in client engagements is available on request.

6. International transfers

Our infrastructure and tooling are configured to keep data in the UK or European Economic Area wherever practicable. Where a transfer outside the UK is necessary, we rely on adequacy regulations or on International Data Transfer Agreements and appropriate safeguards. Client engagements specify data residency requirements in the statement of work.

7. How long we keep it

• Enquiries that do not proceed — up to 24 months, then deleted
• Client project records — for the duration of the engagement and up to 7 years afterwards, to meet contractual, insurance, and tax obligations
• Financial records — 7 years, as required by UK law
• Client data processed on instruction — returned or deleted at the end of the engagement in line with the data processing agreement

8. Security

We apply least-privilege access control, multi-factor authentication, encryption in transit and at rest, managed secret storage, dependency vulnerability scanning, and audit logging. Access to client systems is granted per engagement and revoked at its conclusion. Our practices are aligned to ISO 27001 principles; we describe this as alignment rather than certification.

9. Your rights

Under UK GDPR you have the right to:

• Be informed about how your data is used
• Access a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have data erased where there is no overriding lawful reason to retain it
• Restrict or object to processing, including direct marketing
• Data portability, where processing is based on consent or contract
• Withdraw consent at any time where consent is the lawful basis

Write to sales@interwebservices.co.uk and we will respond within one month. If we process your data as a processor for one of our clients, we will direct your request to that client as the controller and support them in answering it.

10. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk or by calling their helpline.

11. Children

Our services are directed at organisations rather than individuals, and we do not knowingly collect personal data from children through this website. Where a client engagement involves data relating to children, additional safeguards are agreed in the statement of work.

12. Changes to this policy

We review this policy periodically and will update the date at the top of this page when it changes. Material changes affecting how we use your data will be communicated directly where we hold your contact details.