Privacy Notice
How this website handles your personal data — what we collect, why, who processes it, and the rights you have over it.
This site is run by Webjects Limited, a company registered in England and Wales (company number 10521644). We're the "data controller" for the personal data described here, which means we decide what's collected and how it's used. We're registered with the Information Commissioner's Office under registration number ZA936978.
If you have any questions about this notice or your data, email us at info@webjects.co.uk.
This notice explains how the Webjects website (webjects.co.uk) handles your personal data — what we collect when you use the site, why, who else is involved, and the rights you have. It covers this website only. How Webjects handles data as a business more broadly is set out in our Data Protection Policy, which you'll find on our Company Policies page.
We only collect personal data in a few specific situations on this site.
When you contact us. Our contact form asks for your name, your email address, and the details of your enquiry. We collect whatever you choose to put in the message. Sending the form is the only way personal data about you reaches us directly through this site.
When the security check runs. The contact form is protected by hCaptcha, a service that tells human visitors apart from automated bots. To do that, hCaptcha collects limited technical information about your device and how you interact with the check — for example your IP address, your browser and device type, and mouse or touch movements during the challenge.
Analytics, if you've agreed to it. If you accept analytics cookies, Google Analytics 4 (GA4) collects usage data about your visit: the pages you view, the type of device and browser you use, an approximate location worked out from your IP address, and pseudonymous identifiers that let Google recognise a returning browser without knowing who you are. None of this is collected unless you have accepted analytics through the cookie banner.
When something goes wrong technically. If a fault happens in your browser while you're using this site, Sentry (our error-monitoring tool) receives the details — the error itself, the page you were on, and basic technical information about your browser and device, which can include your IP address. It only sees technical fault data, never what you've typed into the contact form.
Responding to your enquiry. When you send us a message, we use your details to reply and to take any steps you've asked us to take. Our lawful basis is our legitimate interests (UK GDPR Article 6(1)(f)) — specifically, dealing with an enquiry you have chosen to send us.
Keeping the form secure. We use the hCaptcha security check to protect the form from spam and automated abuse. Our lawful basis is again our legitimate interests (Article 6(1)(f)) — keeping the site and our inbox secure and usable.
Catching and fixing faults. We use Sentry to tell us when something breaks on the site, so we can put it right quickly. Our lawful basis is our legitimate interests (Article 6(1)(f)) — keeping the site working and reliable.
Measuring how the site is used. Where you have consented, we use GA4 to understand how people find and use the site so we can improve it. Our lawful basis is your consent (Article 6(1)(a)), and we rely on your consent under the Privacy and Electronic Communications Regulations (PECR) (regulation 6) to set the analytics cookies in the first place. You can withdraw that consent at any time — see Cookies below.
We keep the number of third parties involved in this site deliberately small. The ones that may handle your personal data are:
We don't sell your personal data, and we don't share it for advertising.
This site uses as few cookies as possible. We don't run advertising trackers, and we don't set any non-essential cookies until you've accepted them.
Strictly necessary cookies. When you use the contact form, the hCaptcha security check sets a cookie so it can confirm you're a real person and protect the form from abuse. This is set only when you interact with the form, and it's exempt from consent under PECR because it's strictly necessary for a feature you've asked to use.
Analytics cookies (non-essential). GA4 uses cookies to measure how the site is used. These are switched off by default — we use Google Consent Mode, which means no analytics cookies are set and GA4 does not run until you accept analytics in the cookie banner. If you don't accept, none of it runs.
Changing your mind. You can withdraw your consent at any time by reopening the cookie settings from the banner and declining analytics. Your choice is remembered for future visits, and you can change it whenever you like.
Enquiries. If you contact us but don't go on to work with us, we keep your enquiry and our correspondence for up to 12 months after our last contact, and then delete it.
Client records. If you become a client, we keep your records for the duration of our working relationship and then for six years afterwards, to align with our financial and tax record-keeping obligations.
Analytics data. Usage data collected through GA4 is held in pseudonymised form and kept only as long as we need it to understand how the site is used, in line with our GA4 retention settings, after which it is deleted automatically.
Server logs. Standard hosting logs are kept for a short period for security and troubleshooting, then overwritten.
Most of your data stays within the UK or the European Economic Area. Some of the providers above operate outside the UK:
Wherever a transfer outside the UK happens, we rely on the protections that UK data protection law requires for it.
Under UK data protection law, you have the right to:
To exercise any of these, email us at info@webjects.co.uk. We'll respond within one month, as the law requires, and there's normally no charge.
If you're unhappy with how we've handled your data, please tell us first at info@webjects.co.uk so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. Our ICO registration number is ZA936978.
We review this notice regularly and update it when the way we handle data changes. If we make a significant change, we'll update the date below.
Last reviewed: July 2026.