Privacy notice

Effective date: 29 October 2026.

Who we are

This website is run by MDW Consulting Limited, trading as WebAce Design, a company registered in England and Wales with company number 15902128 and registered office at 1501 Norton House, Duke of Wellington Avenue, London SE18 6PD ("WebAce", "we", "us"). We are the controller for the personal information collected through this website and for the information we hold about our own clients. You can contact us about anything in this notice at hello@webacedesign.co.uk.

Two roles

  • As a controller: for enquiries sent through this website, and for our clients' contact and billing details.
  • As a processor: for the websites we build and host, our client is the controller of their customers' information (enquiries, orders, accounts). We process it only on their instructions, under the terms on our data processing page. If your question is about a business's own website, contact that business first.

What we collect and why

  • Enquiries. Your name, email address, business name and what it does, your current website if you give it, and your answers about what you need. We use them to reply, prepare a proposal and, if we work together, deliver it. Lawful basis: steps you ask us to take before entering a contract, or our legitimate interest in replying to you.
  • Clients. Contact details, project material you send us (copy, photos, logins to your old site), and billing records. Lawful basis: performing our contract with you, and our legal duty to keep accounting records.
  • Visits. We measure visits with Vercel Web Analytics, which doesn't use cookies or identify you. Our host keeps short-lived technical logs (such as IP address and browser) to run and secure the site. Lawful basis: our legitimate interest in running a secure website.

We don't sell your information, use it for advertising, or make decisions about you by automated means.

Who we share it with

Only the providers that run our websites, email and accounts (listed on our sub-processors page) and the software providers that help us run our business and build and maintain websites, under contracts that require them to protect it. We don't share it with anyone else unless the law requires us to.

Where it's stored

Our websites and their databases are hosted in the United Kingdom (London). Some providers process data in the European Union, the United States or Canada. Where information leaves the UK we rely on a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

Keeping it secure

  • Every connection to our websites is encrypted (TLS).
  • Each client website has its own separate database, so one client's data is never stored with another's.
  • Access is limited to the people and systems that need it, and admin accounts are protected by unique logins.
  • Backups are taken daily, and we're alerted if a site goes down.

If a breach affects information we control, we'll tell the Information Commissioner's Office within 72 hours where the law requires it, and tell you without undue delay if it's likely to put you at high risk.

How long we keep it

  • Enquiries that don't lead to work: deleted after 24 months.
  • Client records and invoices: six years after the end of the financial year they relate to, as HMRC requires.
  • Website form submissions on client sites: kept for the period each client sets, 24 months by default.

Deleted information can stay in backups for a short time before they're overwritten.

Your rights

You have the right to:

  • see the information we hold about you, free of charge;
  • have it corrected if it's wrong or incomplete;
  • have it deleted;
  • restrict how we use it;
  • receive it in a portable format;
  • object to how we use it, including where we rely on legitimate interests; and
  • complain about how we handle it.

Email hello@webacedesign.co.uk to use any of these rights. We'll reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk or by phone on 0303 123 1113.

Changes

We'll update this notice when how we handle information changes, and show the new effective date at the top.