Privacy Policy

1. Introduction

UK Tech Developers ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website uktechdeveloper.co.uk, use our services, or communicate with us.

Please read this policy carefully. If you do not agree with its terms, please discontinue use of our website. This policy is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and applies to individuals located in the United Kingdom and the European Economic Area (EEA).

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

As a data controller, we determine the purposes and means of processing your personal data and are registered with the Information Commissioner's Office (ICO) as required under UK law.

3. Personal Data We Collect

We may collect and process the following categories of personal data about you:

3.1 Identity Data

• First name and last name
• Business name or trading name
• Job title or role
• Profile photographs (if submitted)

3.2 Contact Data

• Email address
• Telephone number (including mobile)
• Postal address (business or personal)
• Social media handles or profiles

3.3 Financial Data

• Bank account details (for contract payments via bank transfer)
• Payment card details (processed by third-party payment providers; we do not store raw card data)
• Billing address
• Invoice and transaction history

3.4 Technical Data

• IP address and geolocation data
• Browser type and version
• Operating system and platform
• Device identifiers
• Time zone and language settings
• Pages viewed, links clicked, and time spent on pages
• Referral source (e.g., Google, social media, direct)

3.5 Usage Data

• Service and product usage patterns
• Feature interactions and preferences
• Support tickets and communication logs

3.6 Communications Data

• Emails, messages, and enquiries you send us
• Notes from meetings, calls, or video conferences
• Proposals, briefs, and project documentation you share with us

3.7 Marketing Data

• Your preferences regarding marketing communications
• Campaign interaction data (email opens, click-through rates)

4. How We Collect Your Data

We collect data through the following methods:

4.1 Direct Interactions

• Completing contact or enquiry forms on our website
• Booking a consultation via Calendly or similar scheduling tools
• Sending us an email, calling us, or messaging us on social media
• Entering into a contract with us for our services
• Subscribing to our newsletter or marketing communications

4.2 Automated Technologies

When you visit our website, we automatically collect technical data via cookies, web beacons, pixels, and similar tracking technologies. Please see our Cookies section below for full details.

4.3 Third Parties

• Analytics providers such as Google Analytics and Hotjar
• Payment processors such as Stripe or PayPal
• CRM tools such as HubSpot or Notion
• Scheduling tools such as Calendly
• Public sources such as LinkedIn, Companies House, or your business website

5. Lawful Basis for Processing

Under the UK GDPR, we are required to have a lawful basis for each processing activity. We rely on the following legal bases:

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your rights and freedoms.

6. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to your enquiries, questions, and requests promptly
• To provide, manage, and deliver our digital development services
• To process payments and send invoices for completed work
• To manage our ongoing business relationship and project communications
• To send you service updates, project status reports, and important notices
• To send marketing and promotional communications where you have consented or we have a legitimate interest to do so
• To analyse website usage and improve user experience
• To personalise your experience on our website
• To comply with our legal, regulatory, and tax obligations
• To prevent fraud, enforce our terms, and protect our legal rights
• To conduct internal business analysis, forecasting, and strategic planning

7. Sharing Your Personal Data

We do not sell your personal data. We may share your data with carefully selected third parties under the following circumstances:

7.1 Service Providers

We engage trusted third-party service providers who process data on our behalf (as data processors) under strict data processing agreements:

• Hosting & Infrastructure: Vercel, AWS, Cloudflare
• Payment Processing: Stripe, PayPal
• Email & Communications: Google Workspace, Mailchimp
• Analytics: Google Analytics, Hotjar
• Project Management: Notion, Linear, GitHub
• Scheduling: Calendly
• Accounting: Xero, QuickBooks

7.2 Legal Obligations

We may disclose your data to law enforcement, regulators, courts, or other authorities if required by law or to protect our legal rights.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred as part of that transaction. We will notify you of any such change.

7.4 Professional Advisers

Lawyers, accountants, auditors, and other professional advisers where necessary, subject to professional confidentiality obligations.

8. International Data Transfers

Some of our third-party service providers are based outside the UK and European Economic Area (EEA). Where we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including:

• Adequacy decisions by the UK Secretary of State
• Standard Contractual Clauses (SCCs) approved by the ICO
• UK International Data Transfer Agreements (IDTAs)
• Transfers to countries that provide equivalent protection levels

Our offices in India (Bangalore) and Nepal (Kathmandu) assist with development work. Personal data may be accessed by team members in these locations, subject to binding internal data protection policies and appropriate contractual safeguards.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

After the retention period expires, we will securely delete, destroy, or anonymise your data.

10. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. By using our website, you consent to our use of cookies as described below.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can manage or disable cookies via your browser settings or our cookie consent banner. Note that disabling certain cookies may affect the functionality of our website. For more information, visit aboutcookies.org or ico.org.uk.

11. Your Data Protection Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of Access (Subject Access Request): You may request a copy of the personal data we hold about you, free of charge, within 30 days.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Rights Related to Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@uktechdeveloper.co.uk. We will respond within 30 days (or 3 months for complex requests). We may need to verify your identity before processing your request.

12. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted via our website
• Encrypted storage for sensitive data at rest
• Role-based access controls and least-privilege principles
• Regular security audits and vulnerability assessments
• Multi-factor authentication (MFA) on all internal systems
• Staff training on data protection and cybersecurity best practices
• Secure disposal of physical and digital data
• Incident response and breach notification procedures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.

13. Children's Privacy

Our website and services are directed at business clients and are not intended for children under the age of 13 (or 16 where applicable under local law). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@uktechdeveloper.co.uk and we will delete it promptly.

14. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last Updated" date. Where changes are significant, we may notify you by email or through a prominent notice on our website.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

16. Contact Us & How to Complain

For any questions, concerns, or to exercise your data protection rights, please contact us:

How to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.