Legal
Privacy Policy
1. Introduction
This Privacy Policy explains how Walsham Group Limited ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you visit walshamgroup.com (the "Site") or submit an enquiry through our web services intake form. We are committed to handling your data transparently and lawfully under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
2. Who we are
We are the data controller responsible for your personal data.
- Legal name: Walsham Group Limited
- Company number: 17209232 (registered in England and Wales)
- Registered address: 192 Maldon Road, Colchester, Essex, CO3 3AZ, United Kingdom
- ICO registration number: ZC144368
- Contact email: enquiries@walshamgroup.com
3. What data we collect
We collect the personal data you provide when you submit our web services intake form, including:
- Your name and the name of your business
- Email address and phone number
- Business details — type of business, location, existing website, and social media links
- Information about your project — the plan you are interested in, services and prices, opening hours, staff numbers, booking and payment preferences, and any notes you provide
- Files you upload, such as your logo and photographs
We also collect limited technical data automatically — such as your IP address and basic request logs — through our hosting provider, for security and to operate the Site.
4. How we use your data
- To respond to your enquiry and discuss your project
- To prepare quotes and, if you proceed, to design, build, and run the services you request
- To contact you about your enquiry or project
- To operate, secure, and maintain the Site
- To comply with our legal, accounting, and tax obligations
We do not use your data for advertising and we do not sell your data.
5. Lawful bases for processing
We rely on the following lawful bases under Article 6 UK GDPR:
- Legitimate interests — to respond to and follow up on enquiries you send us, and to secure and operate the Site. We have assessed that these interests are not overridden by your rights.
- Performance of a contract — where you engage us, to deliver the services and manage our agreement with you.
- Legal obligation — for accounting, tax, and regulatory record-keeping.
6. Who we share your data with
We share your data only with the following service providers, each of whom processes it on our behalf under appropriate contractual safeguards:
| Service provider | Purpose | Location |
|---|---|---|
| Supabase | Database and file storage for intake submissions and uploads | EU / United States |
| MailerSend | Sending notification and confirmation emails | EU / United States |
| Netlify | Website hosting and content delivery | Global CDN |
| Forward Email | Receiving and forwarding email sent to our addresses | United States / EU |
We may also disclose your data where required by law, court order, or regulatory request, or to protect our rights, property, or safety.
7. International transfers
Some of our providers process data outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or applicable adequacy decisions.
8. How long we keep your data
- Enquiry data — where you do not proceed, for up to 24 months from your last contact, then deleted.
- Client project data — for the duration of our engagement and a reasonable period afterwards.
- Accounting and tax records — up to 7 years, as required by HMRC.
- Server and security logs — up to 12 months.
9. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, email enquiries@walshamgroup.com. We will respond within one month.
10. Cookies and tracking
This Site does not use analytics, advertising, or tracking cookies, and does not track you across websites. We use only what is strictly necessary to deliver the Site. If this changes in future, we will update this Policy and, where required, request your consent.
11. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and restricted, policy-enforced access to submissions. No system is completely secure, but in the unlikely event of a breach affecting your rights we will notify the Information Commissioner's Office within 72 hours where required, and notify you without undue delay where the risk to you is high.
12. Changes to this Privacy Policy
We may update this Policy from time to time. The "Last updated" date above indicates when changes were made.
13. Complaints
If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office (ico.org.uk, helpline 0303 123 1113). We would appreciate the chance to resolve your concern first — please contact us at enquiries@walshamgroup.com.
14. Contact us
Walsham Group Limited
192 Maldon Road
Colchester
Essex CO3 3AZ
United Kingdom
Email: enquiries@walshamgroup.com