Privacy Policy

WEBHAYER is the controller of personal data used to provide installation, repair, maintenance, inspection, configuration and technical support services. Contact: WEBHAYER, 124 City Road, London, EC1V 2NX; web@webhayer.co.uk; 020 8087 1921.

Data we collect

We may collect your name, contact details, service address, booking and service details, correspondence, payment status, invoice information, marketing preferences, IP address, device and browser information, security logs and cookie choices. Stripe processes payment-card data; WEBHAYER does not store full card details.

Purposes and lawful bases

• To answer enquiries, provide quotations, take bookings, collect payment and deliver services: performance of a contract or steps requested before a contract.
• To keep accounts, tax and compliance records and respond to lawful requests: legal obligation.
• To secure and improve the website, prevent fraud, manage appointments and operate the business: legitimate interests, balanced against your rights.
• To send optional email marketing and use non-essential cookies: consent, which you can withdraw at any time.
• To establish, exercise or defend legal claims: legitimate interests and applicable law.

Service providers and recipients

Information may be shared where necessary with our website host, WordPress and WooCommerce providers, Stripe, email and communications providers, Contact Form 7, Mailchimp for subscribed newsletters, Complianz for cookie choices, mapping or media providers including Google Maps and YouTube, professional advisers, insurers, fraud-prevention providers and public authorities where legally required. Providers act under appropriate data-protection terms.

International transfers

Some providers may process data outside the United Kingdom. Where this occurs, we use an approved safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, as applicable.

Retention

• Enquiries that do not become bookings: normally up to 24 months after the last contact.
• Booking, service, invoice and payment records: normally six years after the end of the relevant financial year where needed for tax, accounting and legal claims.
• Marketing records: until consent is withdrawn or after a reasonable period of inactivity, normally no longer than two years.
• Security and technical logs: normally up to 12 months unless required for an investigation.
• Cookie retention periods are described in the Cookies Policy and consent settings.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and you may withdraw consent without affecting earlier lawful processing. You may also object to direct marketing at any time. Email web@webhayer.co.uk to exercise a right. We may need to verify your identity and will normally respond within one month.

Cookies, forms and newsletters

Contact forms send the information you enter so that we can respond. Newsletter details are processed only where you subscribe and every marketing email includes an unsubscribe option. Non-essential cookies and embedded services are controlled through the cookie banner; see the Cookies Policy for details.

Security and automated decisions

We use proportionate technical and organisational measures to protect personal data. WEBHAYER does not make decisions producing legal or similarly significant effects solely by automated processing.

Complaints and updates

Please contact WEBHAYER first so we can investigate. You may also complain to the UK Information Commissioner’s Office at ico.org.uk. We may update this policy when services, providers or legal requirements change.