GDPR Policy for: www.webpower.uk

At WebPower, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This GDPR Policy (“Policy”) outlines how we collect, use, store, and protect personal data when you access or use our website www.webpower.uk (the “Website”) and our services. By using our Website and services, you consent to the practices described in this Policy.

1. Data Controller

WebPower acts as the data controller for the personal data we collect and process as described in this Policy.

2. Personal Data We Collect

2.1 Information Provided by You

When you register an account, purchase our services, or contact our support team, we may collect personal data, which may include:

• Name
• Contact information (email address, phone number, address)
• Payment information
• Account credentials

2.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain information, such as:

• IP address
• Browser type and version
• Device information
• Referring website
• Website usage data (pages visited, time spent on each page, clicks)

3. Purpose and Legal Basis for Processing Personal Data

We collect and process personal data for the following purposes and based on the corresponding legal basis:

• Performance of a contract: To provide the services you have requested, process payments, and communicate with you regarding your account and services.
• Legitimate interests: To improve and optimise our Website and services, understand user preferences, and protect our legal rights.
• Compliance with legal obligations: To fulfill our legal and regulatory obligations.

4. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. When personal data is no longer needed, we securely dispose of it in accordance with our data retention practices.

5. Data Sharing and Transfers

We may share your personal data with the following parties:

• Service Providers: We may engage trusted third-party service providers to assist us in delivering our services. These providers are contractually obligated to handle personal data in a manner consistent with this Policy and applicable data protection laws.
• Legal Compliance: We may disclose personal data if required by law, regulation, or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, personal data may be transferred as part of the transaction. We will take reasonable steps to ensure the confidentiality and security of personal data during such transfers.

6. Your Rights

You have certain rights regarding your personal data, which may include:

• Right to access: You can request access to the personal data we hold about you.
• Right to rectification: You can request corrections to any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You can request the deletion of your personal data under certain circumstances.
• Right to restrict processing: You can request the restriction of processing of your personal data under certain circumstances.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to object: You can object to the processing of your personal data under certain circumstances, including for direct marketing purposes.

To exercise your rights or if you have any questions or concerns about our data processing activities, please contact us using the contact information provided at the end of this Policy.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no data transmission or storage system can be guaranteed to be 100% secure. You are responsible

for maintaining the confidentiality of your account credentials and taking appropriate measures to protect your personal data, such as using strong and unique passwords and keeping them confidential.

8. International Data Transfers

As part of our business operations, we may transfer and process personal data in countries outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards are in place to protect your personal data, such as using standard contractual clauses approved by the European Commission or relying on the recipient’s certification under the EU-U.S. Privacy Shield framework.

9. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to enhance your browsing experience and analyze website usage. You can manage your cookie preferences through your browser settings or by using cookie consent management tools.

10. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect or process personal data of individuals under the age of 16. If you believe that we have inadvertently collected personal data from a child under 16, please contact us, and we will take appropriate steps to delete the information.

11. Changes to this GDPR Policy

We reserve the right to update or modify this GDPR Policy at any time. Any changes we make will be posted on our Website with a revised effective date. We encourage you to review this Policy periodically to stay informed about how we handle personal data.

12. Contact Us

If you have any questions, concerns, or requests regarding this GDPR Policy or our data processing practices, please contact us at:

hello@webpower.uk.

Thank you for entrusting us with your personal data. We are committed to protecting your privacy and ensuring compliance with applicable data protection laws.

WebPower.