Privacy
Notice.

Who we are

Webframes is the controller of the personal information described in this notice. You can contact us about privacy or your information at info@webframes.online.

Information we collect

When you submit a project enquiry, we receive the information you enter, which may include your name, work email address, organisation name, organisation type, sector, approximate workforce and the description of your requirements.

Our hosting provider may also create routine technical and security logs, such as an IP address, browser information, request time and requested page. The form uses a hashed identifier derived from the requesting IP address for short-term abuse prevention and rate limiting.

How and why we use it

• to review and respond to your enquiry;
• to ask relevant follow-up questions and, where appropriate, prepare a proposal;
• to protect the website and investigate technical or security problems; and
• to maintain appropriate records of business correspondence.

We do not use information submitted through the enquiry form to send unrelated marketing unless we ask separately and you choose to receive it.

Our lawful bases

We process enquiry information because it is necessary to take steps at your request before potentially entering into a contract. We may also rely on our legitimate interests in managing business enquiries, maintaining appropriate records and protecting the website, provided those interests are not overridden by your rights.

Who receives the information

Information may be processed by service providers that support our website hosting and business email. We may also disclose information where required by law or to professional advisers where this is necessary. We do not sell personal information.

International processing

Some technology providers may process information outside the United Kingdom. Where this happens, we expect the provider to use an applicable UK adequacy arrangement or appropriate contractual safeguards.

How long we keep it

We keep enquiry correspondence only for as long as reasonably necessary to respond, prepare a proposal and maintain appropriate business records. We periodically review and delete information that is no longer needed, subject to legal, accounting or dispute-related retention requirements.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your personal information, restrict or object to its use, and receive certain information in a portable format. You can make a request by emailing info@webframes.online. We may need to confirm your identity before acting on a request.

Your right to object

You may object to processing based on legitimate interests. Tell us what you object to and why; we will consider your request and explain the outcome.

You may also raise a concern with the UK Information Commissioner’s Office through the ICO complaints service.

Cookies and browser storage

We do not use advertising or analytics cookies. Our cookie and privacy notice uses local storage, a small amount of information saved in your browser, only if you choose “Dismiss and remember”. Choosing “Dismiss for now” closes the notice on the current page without saving a preference.

The preference is called webframes-cookie-notice-v1. It records when you asked us to remember your choice and keeps the notice hidden on this device for 90 days. It is not used for tracking or sent to us or a third party. After 90 days, we remove it when you next visit and show the notice again.

You can remove the preference at any time using the button below or by clearing this website’s data in your browser. If browser storage is unavailable, the notice can still be dismissed, but your choice will not be remembered.

Private business portal

The owner-only portal at /portal stores account access details, bookkeeping entries, company settings and basic employee records for Webframes’ own operations. Employee preparation records include names, references, job titles, employment dates and agreed gross pay. The current portal does not collect bank account details or National Insurance numbers and does not process payroll or submit reports to HMRC.

The portal uses the essential session cookie __Secure-wf_portal to maintain sign-in and protect forms. It is not used for tracking. Sign-in expires after 30 minutes without activity, after eight hours, or when you sign out. Short-lived keyed hashes of the login email and IP address support abuse prevention; sign-ins and changes are recorded in an internal activity log.

Portal access is restricted to the business owner. Business and employment records are kept according to the applicable accounting, employment and legal requirements. This website notice is not a substitute for the employee privacy information that must be provided before using employee data.

Changes to this notice

We will update this page if the way we collect or use personal information changes. The date at the top shows when this notice was last revised.