Privacy Policy
Last updated: 1 May 2026
Who we are
W3IT is a technology services company providing managed IT, cybersecurity, and cloud services to businesses. References to "W3IT", "we", "us", or "our" in this policy refer to W3IT. Our website is w3it.com.
What information we collect
We collect information you provide directly to us, including when you:
- Submit a contact or enquiry form
- Request a security check or report
- Create an account on our dashboard
- Purchase a service or subscription
- Subscribe to updates or communications
This may include your name, email address, company name, domain name, phone number, and payment information (processed securely via Stripe — we do not store card details).
We also collect limited technical data automatically when you visit our website, such as your IP address, browser type, pages visited, and referral source. This is used to understand how our site is used and to improve it.
How we use your information
We use the information we collect to:
- Respond to your enquiries and deliver services you have requested
- Provide and manage your account and dashboard access
- Process payments and issue invoices
- Send service updates and security scan results
- Send marketing communications where you have consented or where we have a legitimate interest (you can opt out at any time)
- Improve our website and services
- Comply with legal obligations
Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
- Contract: where processing is necessary to provide a service you have requested or agreed to
- Legitimate interests: where we have a genuine business reason that does not override your rights (e.g. improving our services, sending relevant marketing to existing clients)
- Consent: where you have explicitly agreed to receive marketing communications
- Legal obligation: where we are required to process data to comply with the law
Who we share your information with
We do not sell your personal data. We share it only with trusted third-party services required to operate our business:
- Cloudflare — infrastructure, DNS, and security services
- Clerk — account authentication and identity management
- Stripe — payment processing
- Email service providers — for delivering transactional and support emails
All third-party providers are required to handle your data securely and in accordance with applicable data protection law.
Data retention
We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Account data is retained for the duration of your account plus a reasonable period for legal and administrative purposes. Contact and enquiry data is retained for up to three years unless you request deletion earlier.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data ("right to be forgotten")
- Object to or restrict certain types of processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, use our contact form. We will respond within 30 days.
Cookies
Our website uses cookies for functionality and analytics. We do not use advertising cookies or third-party tracking beyond what is necessary to operate the site. You can control cookie preferences through your browser settings.
Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via HTTPS. Payment data is handled exclusively by Stripe and never stored on our systems.
Changes to this policy
We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our services after a change constitutes acceptance of the updated policy.
Contact
If you have questions about this policy or how we handle your data, contact us at:
W3IT
Contact form
Website: w3it.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.