1. Introduction

Denwen Technology Ltd ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you interact with our website, services, and communications.

This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this policy.

2. Data Controller

The data controller responsible for your personal data is:

Company: Denwen Technology Ltd
Address: Bedford, Bedfordshire, United Kingdom
Email: hello@denwen.co.uk

3. Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

Identity data: Name, job title, company name
Contact data: Email address, telephone number, postal address
Correspondence data: Content of messages sent via contact forms, email, or telephone
Service data: Information relating to IT support requests, consultations, and project requirements

3.2 Information Collected Automatically

Technical data: IP address, browser type and version, operating system, device information
Usage data: Pages visited, time spent on pages, referring URL, navigation paths
Cookie data: Information collected via cookies and similar tracking technologies (see Section 10)

4. How We Use Your Data

We use your personal data for the following purposes:

To provide, maintain, and improve our IT services and support
To respond to enquiries, consultation requests, and support tickets
To send service-related communications, including updates and security advisories
To send marketing communications where you have provided consent
To analyse website usage and improve our online experience
To comply with legal and regulatory obligations
To protect our legitimate business interests and enforce our terms of service

5. Legal Basis for Processing

We process your personal data on the following legal grounds under the UK GDPR:

Contract performance (Article 6(1)(b)): Processing necessary for the performance of a contract or to take pre-contractual steps at your request
Legitimate interests (Article 6(1)(f)): Processing necessary for our legitimate business interests, including improving our services, managing client relationships, and marketing to existing clients
Consent (Article 6(1)(a)): Where you have given explicit consent for marketing communications or the use of non-essential cookies
Legal obligation (Article 6(1)(c)): Processing necessary to comply with applicable laws and regulations

We do not sell your personal data. We may share your data with:

Service providers: Trusted third parties who assist in delivering our services (e.g., cloud hosting, email platforms, CRM systems). These providers are contractually bound to process data only on our instructions.
Professional advisers: Accountants, lawyers, and auditors where necessary
Regulatory bodies: Where required by law or regulation, including the Information Commissioner's Office (ICO)
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business

7. International Transfers

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with the UK GDPR. This includes:

Transfers to countries covered by UK adequacy decisions
Standard Contractual Clauses (SCCs) approved by the ICO
International Data Transfer Agreements (IDTAs)

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods include:

Client data: Duration of the service contract plus 6 years for legal and regulatory purposes
Enquiry data: 2 years from the date of your last interaction with us
Marketing data: Until you withdraw consent or unsubscribe
Website analytics: 26 months

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data where there is no legitimate reason for continued processing
Right to data portability: Request your data in a structured, commonly used, machine-readable format
Right to object: Object to processing based on legitimate interests or direct marketing
Right to restrict processing: Request the restriction of processing in certain circumstances
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at hello@denwen.co.uk. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

10. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse site usage. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Where changes are material, we will endeavour to notify you by email or via a prominent notice on our website.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: hello@denwen.co.uk
Address: Denwen Technology Ltd, Bedford, Bedfordshire, United Kingdom

Privacy Policy