Privacy Policy

This Privacy Policy explains how Spires Web Tech (“we”, “us”, “our”) collects, uses, shares and protects your personal data. We act as Data Controller for data we collect via our website and services.

Who we are
Spires Web Tech, Burntwood, Staffordshire
Email: hello@spireswebtech.co.uk

1) The data we collect

• Contact data: name, company, email, phone number, message content.

• Account/Project data: proposal details, invoices, support tickets, website/admin access you provide to deliver services.

• Marketing preferences: newsletter sign-ups, opt-in/opt-out records.

• Usage & technical data: IP address, device/browser info, pages viewed, referring URLs, and similar (via cookies/analytics).

• Payment data: handled by third-party processors; we do not store full card details.

2) How we collect it

• Forms on our site (e.g., contact, quote, support).

• Emails and phone calls.

• Analytics and cookies (see §9).

• During onboarding and service delivery (e.g., when you share assets or logins).

3) Why we use your data (lawful bases)

• To respond and provide services (contract): proposals, projects, support, billing.

• To improve and secure our site/services (legitimate interests): analytics, troubleshooting, security.

• To send updates/marketing (consent or legitimate interests): only if you’ve opted in or where relevant to existing clients; you can opt out anytime.

• To meet legal obligations (legal obligation): tax/audit, record-keeping.

4) Sharing your data

We only share data as needed to deliver our services or comply with law, for example with:

• Service providers/sub-processors: hosting, backup/security tools, email/CRM platforms (e.g., Google Workspace), analytics (e.g., Google Analytics), payment processors, project/helpdesk tools.

• Professional advisers (accountants, legal).
  All suppliers are bound by contracts and only process data per our instructions.

5) International transfers (short answer: yes, it’s a legal thing)

If any personal data is transferred outside the UK via our providers, we use appropriate safeguards required by UK GDPR (e.g., the UK Addendum to the EU Standard Contractual Clauses or UK adequacy regulations). If we don’t need to transfer data internationally for your services, we won’t.

6) Retention

• Enquiries: up to 24 months after last contact.

• Client/project records: typically 6–7 years for tax/audit.

• Analytics/cookies: per tool and browser settings (see §9).
  We keep data only as long as necessary, then delete or anonymise it.

7) Security

We use reasonable technical and organisational measures, including least-privilege access, MFA on core systems, encryption in transit, secure configuration/patching, and regular backups for managed sites.

8) Your rights (UK GDPR)

You can: access, rectify, erase, restrict or object to processing; request portability; and withdraw consent at any time (this won’t affect prior lawful processing). To exercise rights, email hello@spireswebtech.co.uk. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk. Our ICO Registration Number is ZC144159.

9) Cookies & analytics

We use cookies and similar technologies to run the site, remember preferences and improve performance.

• Essential cookies (strictly necessary) run without consent.

• Analytics/marketing cookies run with consent (where required).
  Manage preferences via our cookie banner (if enabled) or your browser settings. For Google Analytics, you can use Google’s opt-out add-on. Disabling cookies may affect some features.

10) Marketing

We send email marketing only with your consent or where permitted for existing clients. You can unsubscribe via any email footer or by contacting us.

11) Third-party links

Our site may link to third-party sites. Those sites have their own privacy policies and we’re not responsible for them.

12) Changes to this policy

We may update this policy from time to time. We’ll post the new version with a new “Last updated” date.

Contact
Spires Web Tech, Burntwood, Staffordshire
hello@spireswebtech.co.uk