1. Who's responsible for your data
The data controller is TicketWave HQ Ltd, which operates the “UK Web Marketing” service — a company registered in England and Wales, company number 17143167, registered office Radley House, Richardshaw Road, Pudsey, LS28 6LE, United Kingdom. Contact us about privacy at hello@ukwebmarketing.com.
2. What we collect, and why
| Data | When / why | Lawful basis |
|---|---|---|
| Your name, email address, business name, industry and current website (if any), and the subscription details (Stripe customer/subscription IDs, monthly amount) | When you start a subscription (Lite £295/mo, Growth £1,495/mo, or Bespoke) through our Stripe checkout — to provide the service, deliver it and keep accounting records. Card details are entered with and processed by Stripe; we do not see or store full card numbers. | Performance of our contract with you; legal obligation (tax/accounting) |
| Your name, email, phone number, and the messages you send (and any files you share) | When you use our contact form, audit form, lead-magnet form, or contact us by WhatsApp, email or phone — so we can reply, answer questions and run your project. Form submissions are delivered to our EU-resident inbox via Resend EU (Resend, Ireland). | Steps to enter into a contract; our legitimate interest in responding to enquiries |
| Your vertical self-ID (clinic, solicitor, school, accountant, or other) and the lead-magnet you requested | When you request a lead magnet (e.g. the compliance audit checklist) — to send you the right PDF and tailor any follow-up to your sector. You can unsubscribe in one click. | Consent (which you can withdraw at any time) |
| Project content you give us — text, logos, photos, and any account logins you choose to share | To design and build your website | Performance of our contract with you |
| Technical data — IP address, browser/device type, pages viewed, referring page, timestamps | Standard server/CDN logs kept by our hosting provider (Vercel London), for security and to keep the site running. Vercel Analytics + Speed Insights run on first-party endpoints (/_vercel/insights, /_vercel/speed-insights), set no cookies, and don't profile you. | Our legitimate interest in a secure, working, performant website |
| Business contact details and a note of the conversation | If we contacted you (e.g. by phone) about our services because your business looked like a fit — we keep your business name, number and a short note. Tell us to stop and we will, and we'll delete it. | Our legitimate interest in offering relevant services to businesses (direct marketing to businesses); you can object at any time |
| Records of our dealings — messages, receipts, invoices | To run the project and meet legal/accounting obligations | Contract; legal obligation; legitimate interests |
We don't ask for special-category data and please don't send it to us. We don't carry out automated decision-making or profiling. Data you submit through this site is either through our contact / audit / lead-magnet forms (delivered to our EU-resident inbox via Resend EU) or during the Stripe checkout (which is hosted by Stripe).
3. Cookies and tracking
As of the date above, this website does not set any tracking, advertising or third-party analytics cookies, and doesn't profile you. Vercel Analytics and Speed Insights (which power the site's performance monitoring) run on first-party endpoints, are cookieless, and don't share data with third parties. The full per-cookie breakdown — including the strictly-necessary cookies set by Stripe Checkout during payment — lives on the standalone Cookie Policy. If we ever add non-essential analytics or marketing cookies, we'll update both policies and ask for your consent first via a banner. You can block or delete cookies in your browser settings at any time.
4. Who we share it with
We don't sell your data. We share it only with service providers who help us run the business, and only as needed. The website itself runs on EU-sovereign infrastructure where possible — see the full sub-processor disclosure for the live list. Headline:
- Hosting & CDN — Vercel Inc., served from the London (lhr1) region. Vercel Analytics and Speed Insights are first-party, cookieless, and run on the same origin.
- Email forwarding (inbound) — Cloudflare Email Routing forwards
@ukwebmarketing.commail to our inbox. - Email delivery (outbound) — Resend (Ireland, EU) sends form submissions and lead-magnet follow-ups from
@ukwebmarketing.comto EU-resident infrastructure. - Payments — Stripe Payments Europe Ltd. (Ireland) processes subscription billing for our three tiers and provides fraud prevention.
- Messaging — if you contact us via WhatsApp, that message and your number are processed by WhatsApp / Meta under their own terms; we use ordinary email and phone for other contact.
- CRM (where applicable) — at Growth and Bespoke tiers, project communications may be filed in Capsule CRM (Manchester, UK).
- Professional advisers (accountant, lawyer) and, if required, regulators or law enforcement.
Some upstream providers may transfer data internationally. Where transfers happen, they are protected by an appropriate safeguard — UK International Data Transfer Agreement / Addendum, UK adequacy regulations, or equivalent. The sub-processor disclosure documents this per-vendor.
5. How long we keep it
Enquiries that don't become projects: up to 12 months, then deleted. Project and client records: for the life of the project and then up to 6 years afterwards, to handle queries, disputes and tax/accounting requirements. Server logs: typically a short period set by the hosting provider. We then delete or anonymise the data.
6. Your rights
Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have data erased (in certain cases); restrict or object to processing (including processing based on legitimate interests); data portability; and to withdraw consent where we rely on it (without affecting earlier processing). To exercise any of these, email hello@ukwebmarketing.com — we'll respond within one month.
If you're not happy with how we've handled your data you can complain to the Information Commissioner's Office (ICO), ico.org.uk, helpline 0303 123 1113 — though we'd appreciate the chance to put things right first.
7. Keeping data safe
We use reasonable technical and organisational measures to protect personal data — for example access controls, encryption in transit (HTTPS), and limiting who can see it. No method of transmission or storage is completely secure, but we take it seriously and review our practices.
8. Other websites
This site links to other websites (including client sites and TicketWave HQ properties). We're not responsible for their content or privacy practices — check their own policies.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when. Significant changes will be highlighted on this page.
10. Contact
Any privacy questions or requests: hello@ukwebmarketing.com.
11. Related documents
Cookie Policy · Data Processing Agreement · Sub-processors · Vulnerability Disclosure · All legal documents
12. Changelog
- v1.1 — 2026-06-03 — cookie detail moved to standalone Cookie Policy; cross-links added; review cadence stamped.
- v1.0 — June 2026 — initial publication on the EU-sovereign rebuild.