Effective Date: 26 May 2026 · Version 2.0
Wellington Web Co. is committed to protecting your personal data and being transparent about how we use it. This Privacy Policy explains what data we collect, why we collect it, how we use it and what rights you have. It applies to all personal data processed by Wellington Web Co. in connection with our website and services.
Wellington Web Co. is a web design and digital services agency based in Edinburgh, Scotland, United Kingdom.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Wellington Web Co. is the data controller in respect of personal data collected through this website and in the course of providing our services.
We collect and process the following categories of personal data:
Data you provide directly:
Data collected automatically when you use our website:
We do not collect special category data (such as health information, racial or ethnic origin, political opinions, or biometric data) and we do not knowingly collect data from anyone under the age of 16.
We collect personal data through the following channels:
UK GDPR requires us to have a lawful basis for processing personal data. We process your data under the following bases:
Contract performance (Article 6(1)(b)): Where you are a client or prospective client, we process your data to provide quotes, enter into and perform our contract with you, issue invoices, deliver project work and manage the client relationship. This is the primary basis for processing client data.
Legitimate interests (Article 6(1)(f)): We process certain data on the basis of our legitimate business interests, including:
We always balance our legitimate interests against your rights and interests before relying on this basis.
Legal obligation (Article 6(1)(c)): We may process data to comply with legal obligations, such as retaining financial records for HMRC purposes.
Consent (Article 6(1)(a)): Where we send marketing communications or use non-essential cookies, we rely on your consent. You can withdraw consent at any time (see Section 9).
We use your personal data for the following purposes:
We will never sell, rent or share your personal data with third parties for their own marketing purposes.
We share personal data only where necessary and only with the following categories of recipients:
Service providers and processors: We use trusted third-party tools to run our business. These providers act as data processors and may handle your data only on our instructions:
Legal and regulatory: We may disclose personal data to law enforcement, regulatory bodies or courts where required by law or to protect our legal rights.
We do not transfer personal data outside the UK or EEA unless appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses).
Our website uses cookies, small text files placed on your device, to make the site work properly and to help us understand how it is used.
Essential cookies: These are necessary for the website to function and cannot be switched off. They do not collect personal data for marketing purposes.
Analytics cookies: With your consent, we use Google Analytics to collect anonymised data about how visitors use our site (pages visited, time on site, traffic sources). This helps us improve the site. Google Analytics uses cookies to distinguish users. The data is aggregated and does not identify you personally. You can opt out of Google Analytics tracking at any time via tools.google.com/dlpage/gaoptout.
Managing cookies: You can control and delete cookies through your browser settings. Disabling cookies may affect how certain parts of the website function. Our cookie banner lets you accept or decline non-essential cookies when you first visit the site.
We retain personal data only for as long as necessary for the purposes described in this policy. Our standard retention periods are:
When data is no longer needed, we securely delete or anonymise it.
You have the following rights in relation to your personal data. To exercise any of them, please contact us at contact@wellingtonwebco.com. We will respond within one calendar month.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, notify you directly without undue delay.
Our services are directed at businesses and adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will delete it promptly.
Our website may contain links to third-party websites (for example social media platforms, hosting providers or tools we recommend). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.
If you are unhappy with how we have handled your personal data, please contact us first at contact@wellingtonwebco.com and we will do our best to resolve it.
If you remain dissatisfied, you have the right to lodge a complaint with the UK's supervisory authority:
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make significant changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
For any questions, requests or concerns about this Privacy Policy or the way we handle your personal data, please contact us:
This Privacy Policy was last updated on 26 May 2026 and applies to all data processed by Wellington Web Co. from that date. It is governed by and construed in accordance with the laws of Scotland and the United Kingdom.