Privacy Policy

websprint.co.uk is run by WebSprint Limited, a company registered in England and Wales (company number 15325766), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. For the personal data described here, WebSprint Limited is the controller.

For any privacy question or request, email privacy@websprint.co.uk.

Enquiry form

If you use the "Ask us anything" form, we collect your name, email address and message. We use them to reply to your enquiry and, if you go on to work with us, to prepare a proposal. The form is delivered to our inbox by our email delivery provider. You don't have to give us your details, but we can't reply without a way to contact you.

Booking a call

The "Book a Free Call" buttons open a booking calendar provided by Cal.com. If you book, Cal.com collects the details you enter (such as your name, email address and any notes) and shares them with us so we can hold the call. Nothing from Cal.com loads until you click one of these buttons. The cookies and storage Cal.com uses once you do are listed under Cookies.

Analytics (only if you accept)

If you accept analytics in our cookie banner, we use Umami, an analytics tool that we host ourselves on WebSprint-controlled servers, to understand how the site is used. Until you accept, the analytics script is not loaded at all. Umami does not set cookies. It records the pages you visit, the referring website, your browser, operating system, device type, screen size, language and approximate location (country, region and city). Umami uses your IP address to work out that location and a visit identifier that changes periodically, but does not store the IP address itself. Analytics requests reach our servers through Cloudflare. No analytics data is shared with any other third party. You can change your choice at any time with the "Cookie preferences" link in the footer. We keep analytics data for 24 months, then delete it automatically.

Hosting and server logs

The website is hosted by Vercel. Like any web host, Vercel processes your IP address and technical request details (such as browser type and the page requested) to deliver the site and keep it secure. The request logs available to us are kept for one day. The site is delivered through Vercel's global network, and its server-side code runs in Vercel's Washington, D.C. region in the United States.

• Enquiries and bookings: our legitimate interest in replying to people who contact us.
• Quotes and proposals you ask for: taking steps at your request before entering into a contract.
• Analytics:your consent, which you give or refuse in the cookie banner and can withdraw at any time from "Cookie preferences".

You can object to processing based on legitimate interests at any time (see section 8).

We use these service providers, who process personal data on our behalf:

• Vercel: website hosting.
• Cloudflare: Cloudflare Tunnel, which carries analytics traffic to our servers.
• Resend: delivers enquiry form submissions to our inbox.
• Cal.com: call booking.
• Our business email provider: hosts the inbox where we receive and answer enquiries and privacy requests.

Umami analytics runs on servers WebSprint controls, so no outside company receives analytics data for processing. Cloudflare carries that traffic to our servers, as described above.

We do not sell your personal data. We may disclose it if the law requires us to, for example to a court or regulator.

Vercel and Cloudflare are based in the United States, so personal data they process (such as your IP address, request details and, for Cloudflare, analytics traffic in transit) may be handled outside the UK. What you send through the enquiry form is processed by Vercel in the United States and delivered to our inbox by Resend, which is also based in the United States. Other providers listed above may also process data outside the UK. Where personal data is transferred outside the UK, we make sure it is protected by the safeguards UK law requires, such as an adequacy decision or approved contractual protections. You can ask us for details of these safeguards, or a copy of them, by emailing privacy@websprint.co.uk.

• Enquiries: 12 months after our last contact with you, unless you become a client, in which case we keep what we need for the relationship.
• Legal hold: we may keep specific records, such as particular reports or log entries, for longer than these periods where we need them to investigate or respond to a security incident; to comply with a legal requirement, court order or notice (for example an Ofcom data preservation notice); to respond to a lawful request from a regulator, the police or another law enforcement body; or to establish, exercise or defend legal claims. We keep only what is needed, restrict who can access it, and delete it once it is no longer needed for that purpose.
• Your cookie choice: kept in your browser for up to 6 months, after which we ask again.
• Analytics: 24 months, then deleted automatically.

UK law (PECR) covers cookies and any other technology that stores or reads information on your device. We use:

• Your cookie choice (strictly necessary):we save your analytics choice in your browser's local storage so we don't ask on every page. It is kept for up to 6 months, then we ask again.
• Umami analytics (optional): sets no cookies, but reads information from your browser such as screen size and language. It only loads if you accept analytics. We keep the analytics data for 24 months, then delete it.
• Cal.com booking calendar (only when you ask to book): nothing from Cal.com loads or is stored until you click "Book a Free Call". When you do, Cal.com opens its calendar from its EU service (cal.eu) and stores, on its own domain: a Cloudflare security cookie (__cf_bm, 30 minutes) that helps it tell people from bots; two sign-in security cookies (__Secure-next-auth.csrf-token and __Secure-next-auth.callback-url) that are deleted when you close your browser; and three local storage entries: a random ID that holds the time slot you pick while you finish booking (reserverUid), your 12 or 24-hour clock setting (timeOption.is24hClock) and a sign-in status message (nextauth.message). None of these are used for advertising. Cal.com controls them; see Cal.com's privacy policy.

Optional technologies are off until you choose. Accept and reject are equally easy, and you can change your mind at any time: Cookie preferences.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw consent, where we rely on consent.

To use any of these rights, email privacy@websprint.co.uk. We will reply within one month.

If you want to complain about how we handle your personal data, email privacy@websprint.co.uk. We will acknowledge your complaint within 30 days and tell you what we are doing about it.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first, so please contact us before going to the ICO.

We will update this page when the way we handle personal data changes, for example if we add a new service provider. The date at the top shows when it was last updated.