Privacy Policy

1. Who we are

Web911 (“we”, “our”, “us”) provides website repair, maintenance, and audit services.
Our website address is: https://web911.com.

We comply with the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where applicable), and the Privacy and Electronic Communications Regulations (PECR).

2. What personal data we collect and why

We collect information to deliver our services, respond to inquiries, and maintain website security. This includes:

Type of Data	Purpose	Legal Basis
Contact details (name, email, message content)	To respond to your inquiries or service requests	Legitimate interest / performance of a contract
Payment information (handled by Stripe)	To process payments securely	Performance of a contract
Account details (username, hashed password)	To create and manage your customer account	Performance of a contract
Technical data (IP address, browser type, device)	To detect spam, ensure security, and analyse usage	Legitimate interest
Cookies & analytics data	To understand website performance and user behavior	Consent (for non-essential cookies)

We do not sell or rent your data to anyone.

3. Payments

We use Stripe Payments UK Ltd to process all transactions.
When you make a payment, Stripe collects your identifying and financial information directly. We do not store full credit card numbers or banking details on our servers.

Stripe may transfer data outside the UK and EEA; it uses standard contractual clauses and other approved safeguards.
See Stripe’s privacy policy: https://stripe.com/privacy

4. Comments & Discussions

Your discussions with us will take place within our secure website platform. This data will not be broadcast publicly on the website.

We will actively discourage you from sharing passwords via our platform as we prefer to use our one time password sharing service PassWord Link : https://password.link/en

5. Media uploads

We may well ask you to upload screenshots of your website and other imagery to assist us troubleshooting your problems. We will keep this data secure and never share or sell it. However to protect yourselves always anonymize your images where possible and avoid including embedded location data (EXIF GPS).

6. Cookies

We use essential cookies to make the site function, and optional cookies (with your consent) to analyse usage or improve performance.

Login cookies last for up to 2 days (or 2 weeks if “Remember Me” is selected).
Screen preference cookies last for 1 year.
Comment form cookies last for 1 year for convenience.
Analytics or third-party cookies may last longer depending on provider settings.

You can manage or delete cookies through your browser settings.
If you block cookies, some features may not work correctly.

7. Embedded content from other websites

Pages on this site may include embedded content (e.g. videos, maps, or social media posts).
Embedded content behaves as if you visited the other website directly and may collect data, use cookies, or track your interaction.
We recommend reviewing the privacy policies of any linked or embedded third-party services.

8. Who we share your data with

We share personal data only with trusted service providers where absolutely necessary in order to provide our services to you:

Stripe – payment processing
Email providers / web hosts – for transactional emails
Spam detection services (e.g. Akismet) – to protect the site from abuse
Analytics providers – to measure site performance (only if consented)
Password Link – Passwords / account access

These providers only process your data according to our instructions and applicable laws.

If you request a password reset, your IP address will be included in the reset email.

9. How long we retain your data

Comments: retained indefinitely for moderation and continuity.
Accounts: stored while active; deleted upon request or after inactivity.
Payment records: kept for up to 6 years to meet accounting and legal obligations.
Analytics data: retained as per third-party provider retention settings.

10. Security of your data

Passwords are stored in hashed (encrypted) form and are never visible to staff.
We use secure connections (HTTPS) and take reasonable technical and organizational measures to protect your data from unauthorized access, alteration, or loss.

We encourage all account access we may need from you to be shared via our password sharing service Password.Link.

However, no online service can guarantee absolute security.

11. International data transfers

As we serve customers worldwide and use third-party services (such as Stripe or hosting providers) that may operate outside the UK or EEA, your data may be transferred internationally.
Where this occurs, we rely on adequacy decisions or standard contractual clauses approved by the UK and EU to ensure equivalent data protection.

12. Your rights

Under data protection law, you have the right to:

Access a copy of your personal data
Correct inaccuracies
Request deletion (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent (where processing is based on consent)

To exercise these rights, contact us at privacy@web911.com.
We will respond within one month.

13. Where your data is sent

Visitor comments and form submissions may be checked through automated spam detection services.
Some service providers may be located outside the UK/EEA under appropriate safeguards.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.
The latest version will always be available at https://web911.com/privacy-policy.

Last Updated: 11th October, 2025