Privacy Policy

1. Who We Are

Etwrk Limited is registered in England and Wales (Company Registration No. 16389026), with a registered address at 124 City Road, London, EC1V 2NX. We are registered with the Information Commissioner's Office (ICO Registration No. ZB977379).

We are the data controller for personal data collected through our website and in the course of providing our services. For data protection enquiries, contact us at [email protected].

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information — name, email address, phone number, and company name when you contact us or enquire about our services.
• Communications — the content of emails, messages, and other correspondence you send to us.
• Technical data — IP address and browser characteristics processed transiently when you submit our contact form, for bot and fraud protection purposes. See section 5.
• Professional data — information about your business, IT environment, and requirements that you provide in the course of engaging our services.

We do not knowingly collect personal data from children under 16. Our services are directed at business users.

3. Legal Bases for Processing

We rely on the following legal bases to process your personal data:

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.

4. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and provide quotations or proposals.
• Deliver the IT infrastructure services you have engaged us to provide.
• Manage our client relationship, including invoicing and communications.
• Comply with our legal and regulatory obligations.
• Send relevant updates or information about our services to existing clients (you can opt out at any time).

We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Sharing and International Transfers

We do not sell your personal data. We may share it with:

• Service providers acting as data processors on our behalf, including:
  • Google LLC — for Google Workspace (email, documents, and collaboration tools) and Google Cloud Platform (website and server infrastructure, hosted within the UK). Google Workspace data may be processed outside the UK; this is covered by Google's Data Processing Terms and Standard Contractual Clauses.
  • Cloudflare, Inc. — for a bot-protection service used on our contact form. Cloudflare processes technical data (IP address, browser signals) to verify that form submissions are made by a human. Data may be processed in the US; this is covered by Cloudflare's Data Processing Addendum and Standard Contractual Clauses. Cloudflare does not use this data for tracking or advertising.
• Professional advisers — accountants, lawyers, and insurers where necessary.
• Regulatory authorities — where required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Our general retention periods are:

• Client records and correspondence — 7 years from the end of the client relationship, in line with our legal and tax obligations.
• Enquiries that did not result in an engagement — 12 months from last contact.

After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — to request a copy of the personal data we hold about you.
• Rectification — to ask us to correct inaccurate or incomplete data.
• Erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it.
• Restriction — to ask us to restrict processing of your data in certain circumstances.
• Portability — to receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Object — to object to processing based on legitimate interests, including for direct marketing purposes.
• Withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include access controls, encrypted communications, and limiting data access to those who need it for their work.

While we take security seriously, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us.

9. Cookies

Our website does not use tracking or analytics cookies. The bot-protection service on our contact form does not set persistent tracking cookies. No cookie consent banner is displayed because none is required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website or services following an update constitutes acceptance of the revised policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please get in touch.