Privacy Policy

GDPR

Compliant

UK

Based & Regulated

Full

Transparency

Your Privacy Matters

Last updated: 11 December 2025

Effective date: 2025-11-28

1. Who We Are

Edmonds Commerce Limited is a UK-based digital development agency specialising in PHP consultancy and custom software development. We're the data controller for the personal information we collect and process through our website and services.

Company Details:

We take your privacy seriously and are committed to protecting your personal data in accordance with UK data protection law.

2. What Information We Collect

We collect information we need to provide our services and communicate with you. Nothing more.

When You Contact Us

When you use our contact form or email us, we collect:

  • Your name
  • Your email address
  • Your company name (if you provide it)
  • Your phone number (if you provide it)
  • Any information you include in your message

When You Visit Our Website

We don't track website visitors. We don't use analytics, tracking cookies, or any visitor monitoring tools. We'd rather avoid the cookie consent banner entirely. We only collect data you explicitly provide through our contact form.

What We Don't Collect

We don't:

  • Track you across our website or other websites
  • Use cookies or tracking scripts
  • Collect analytics about your browsing behaviour
  • Store payment information (we don't process payments online)
  • Use facial recognition or biometric data
  • Create profiles for advertising purposes

3. Why We Collect Your Data

We're upfront about why we need your information:

Contact Enquiries

Purpose: To respond to your questions and discuss potential projects Legal Basis: Legitimate interests (responding to business enquiries) Retention: 2 years from last contact

Client Projects

Purpose: To deliver development services you've commissioned Legal Basis: Contract performance Retention: 7 years after project completion (UK tax and business records requirements)

4. How We Protect Your Data

We're a technical consultancy, so we take security seriously:

  • Encryption: All data transmitted to and from our website uses HTTPS/TLS encryption
  • Access Controls: Only authorised team members can access personal data
  • Secure Processing: Contact form submissions are processed by Google and forwarded to our business email. No data is stored in the processing layer
  • Email Security: Contact enquiries are stored in our secure business email system with standard enterprise security measures
  • Regular Reviews: We review our security practices regularly
  • Staff Training: Our team understands data protection responsibilities

These security measures apply to contact form enquiries only. The website itself stores no visitor data. We don't have perfect security (no one does), but we use industry-standard practices and continuously improve our defences.

5. Who We Share Your Data With

We're selective about who gets access to your information:

Service Providers We Use

  • Google: Processes contact form submissions and forwards them to our business email

This provider operates with appropriate safeguards for international data transfers.

When We Might Share Data

We may share your information:

  • If required by law (court orders, legal obligations)
  • To protect our legal rights
  • With your explicit consent
  • As part of a business sale (we'd notify you first)

We don't sell your data to third parties. We never have, and we never will.

6. Your Rights

Under UK GDPR, you have significant control over your personal data:

Right to Access

You can ask us what personal data we hold about you. We'll provide a copy within one month. Free of charge.

Right to Rectification

Got incorrect information about you? Tell us. We'll fix it.

Right to Erasure

You can ask us to delete your personal data. We'll do it unless we have a legal reason to keep it (like tax records).

Right to Restrict Processing

Want us to pause while we resolve a concern? Just ask.

Right to Data Portability

You can ask for your data in a commonly-used format to transfer to another service.

Right to Object

You can object to us processing your data for marketing. We'll stop. Immediately.

Right to Withdraw Consent

If we're processing your data based on consent, you can withdraw it any time. This doesn't affect anything we did before you withdrew it.

How to Exercise Your Rights

Email us at [email protected] with your request. We'll respond within one month and won't charge you unless your request is clearly unfounded or excessive.

7. Cookies and Tracking

We don't use cookies on this website. No tracking, no analytics cookies, no marketing cookies. Nothing.

See our Cookie Policy for full details about our no-cookies approach.

This means:

  • You won't see cookie consent banners
  • We don't track your browsing behaviour
  • We don't share data with advertising networks
  • Your visit is completely private

8. How Long We Keep Your Data

We don't keep data longer than necessary. Simple as that. Here are our retention periods:

Data TypeRetention PeriodReason
Contact enquiries2 years from last contactBusiness relationship management
Client project data7 years after completionUK tax and legal requirements

After these periods, we securely delete or anonymise the data.

9. International Data Transfers

We're UK-based and retain enquiry data in the UK. Some of our service providers may process data internationally.

When data goes outside the UK, we ensure:

  • The destination country has adequate data protection laws, or
  • We use standard contractual clauses approved by the UK government, or
  • The provider has other appropriate safeguards in place

10. Children's Privacy

Our website and services target businesses, not children. We don't knowingly collect information from anyone under 16. Parents: if you believe we've collected information about your child, contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we'll update the "Last Updated" date at the top and may notify you by email or website notice.

We recommend checking this page occasionally to stay informed about how we protect your data.

12. How to Complain

We hope you're satisfied with how we handle your data, but if you have concerns:

First, Contact Us: Email: [email protected] Phone: +44 (0)113 880 5654

We'll do our best to resolve your concerns quickly.

If You're Not Satisfied:

You have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

ICO Contact Details:

  • Website: ico.org.uk/make-a-complaint
  • Phone: 0303 123 1113 (Mon-Fri, 9am-5pm)
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

The ICO recommends trying to resolve issues with us first, but you can contact them at any time.

13. Questions?

If you have questions about this privacy policy or how we handle your data, we're happy to help:

We aim to respond to all enquiries promptly.

Related Policies

Explore other important documents

Ready to eliminate your technical debt?

Transform unmaintainable legacy code into a clean, modern codebase that your team can confidently build upon.