SP WEB CONNECTIONS

Privacy Policy

At SP Web Connections, we respect your privacy and recognise the importance of protecting personal information.

This Privacy Policy explains what personal information we may collect when you visit our website, contact us or use our services, how that information is used and the rights you have under UK data protection legislation.

1. About This Privacy Policy

This Privacy Policy explains how SP Web Connections handles personal information in connection with its website and business activities.

These activities include website design and development, domain registration, website hosting, IT support, Microsoft 365 assistance and related services.

SP Web Connections is responsible for determining how personal information collected for its own business administration, customer relationships and communications is used.

Where we provide website hosting or technical services involving information controlled by another business, our responsibilities may differ depending on the services and contractual arrangements involved.

Data controller: SP Web Connections
Contact email: mail@spwebco.com
Business contact address: Unit 7 Grange Farm, Turners Hill Road, Crawley Down, West Sussex, RH10 4EY

2. Information We May Collect

The personal information we process depends on how you interact with us and which services you request.

This may include:

  • Your name and business or organisation name.

  • Email address, telephone number and postal or billing address.

  • Information included in enquiries or correspondence.

  • Details of services you have requested or purchased.

  • Domain registration and associated contact information.

  • Information required to administer customer accounts, invoices and renewals.

  • Technical information needed to investigate support requests.

  • Website usage information where optional analytics have been accepted.

  • Technical connection information recorded by web servers for operational and security purposes.

We aim to collect only the information reasonably necessary for the relevant purpose.

3. How We Use Personal Information

We may use personal information to:

  • Respond to enquiries and provide quotations.

  • Communicate with customers about requested services.

  • Provide and administer website hosting, domain registration and other services.

  • Arrange domain registrations, transfers and renewals.

  • Provide technical support and investigate reported problems.

  • Maintain relevant customer and financial records.

  • Meet legal, regulatory and contractual obligations.

  • Protect our systems and investigate potential security incidents.

  • Understand how visitors use our website where analytics consent has been provided.

We do not use personal information for purposes unrelated to those for which it was collected without an appropriate lawful basis.

4. Lawful Bases for Processing

Under the UK General Data Protection Regulation (UK GDPR), personal information must be processed on an appropriate lawful basis.

Depending on the circumstances, we may rely on:

Contract: Where processing is necessary to provide a service you have requested, or to take steps before entering into a contract.

Legal obligation: Where information must be processed or retained to meet applicable legal requirements, including relevant financial and record-keeping obligations.

Legitimate interests: Where processing is reasonably necessary for administering our business, responding to relevant communications, protecting our systems or supporting existing customer relationships, provided those interests are not overridden by individual rights.

Consent: Where consent is required, such as for optional website analytics. Consent can be withdrawn without affecting the lawfulness of processing carried out before withdrawal.

The applicable lawful basis depends on the particular activity.

5. Domain Registration Information

When registering or managing domain names, certain personal or organisational information may be required by the relevant domain registry, registrar or registration service provider.

For .uk domain registrations, this may include information processed in connection with Nominet's registration requirements.

Information may need to be shared with relevant registration providers to complete registrations, transfers, renewals and other domain administration activities.

Some domain registration information may also be processed or disclosed in accordance with applicable registry policies and legal obligations.

Our separate Domain Registration Policies provide further information about the registration services we offer.

6. Website Hosting and Customer Website Data

Some customers use SP Web Connections to host websites or applications containing information about their own customers, employees or website visitors.

In these circumstances, the customer may be the data controller for information collected through their website, while SP Web Connections may act as a data processor when providing hosting or related technical services.

The responsibilities of the parties will depend on the nature of the service and any applicable agreement.

Customers remain responsible for ensuring that their own websites provide appropriate privacy information and comply with applicable data protection requirements.

7. Technical Support and Access to Information

When providing IT support, we may need access to computers, user accounts, files, software configurations or other systems.

Any access should be limited to what is reasonably necessary to investigate or carry out the agreed work.

Customers should inform us where systems contain particularly sensitive or confidential information so that appropriate arrangements can be discussed.

8. Sharing Information With Third Parties

We may share personal information with third parties where necessary to provide requested services or meet applicable obligations.

Depending on the service, these may include:

  • Domain registries and registration providers.

  • Website hosting and infrastructure suppliers.

  • Email and cloud service providers.

  • Payment, accounting and administrative service providers.

  • Professional advisers and regulatory authorities where required.

We do not sell customer personal information.

Where a third party processes personal information on our behalf, appropriate contractual and data protection arrangements should be in place.

9. International Transfers

Some technology providers and online services operate internationally.

Where personal information is transferred outside the United Kingdom, we will consider the applicable data protection requirements and any necessary safeguards.

Details of relevant international transfers and safeguards can be provided where required.

10. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including meeting applicable legal, contractual, accounting or regulatory requirements.

Retention periods may differ according to the type of information, the service provided and whether an ongoing customer relationship exists.

For example, financial records may need to be retained for statutory purposes, while technical support information may be kept only for as long as needed for the relevant service and appropriate follow-up.

We periodically review information that is no longer required and arrange for its deletion or secure disposal where appropriate.

11. Keeping Information Secure

We take reasonable technical and organisational measures to help protect personal information against unauthorised access, alteration, loss or disclosure.

Measures may include appropriate access controls, account authentication, software maintenance, system security and backup arrangements.

However, no electronic system or method of transmitting information over the internet can be guaranteed completely secure.

12. Website Analytics and Cookies

Our website may use cookies or similar technologies to support essential functionality and, where you have consented, to help us understand website usage.

Optional analytics are not intended to operate before the required consent has been given.

Further information is available in our separate Cookie Policy.

13. Your Data Protection Rights

Depending on the circumstances and the lawful basis for processing, you may have the right to:

  • Request access to personal information held about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of personal information where applicable.

  • Request restriction of certain processing activities.

  • Object to processing based on legitimate interests.

  • Request transfer of relevant information where data portability applies.

  • Withdraw consent where processing relies on consent.

These rights are subject to applicable legal conditions and exemptions.

You have the right to object to processing based on legitimate interests, subject to the circumstances set out in data protection law.

To exercise your rights, please contact us using the details provided in this policy.

14. Complaints

If you have concerns about how SP Web Connections handles your personal information, please contact us so that we can investigate the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Further information is available at www.ico.org.uk.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or the way personal information is processed.

The latest version will be published on this website.

Last updated: 5th November 2026