Privacy Policy

1. Who We Are

Lightwork Ecommerce Ltd ("Lightwork", "we", "us", "our") is the data controller for personal data collected via this website and in the course of providing our services. We are committed to protecting your personal data and processing it in accordance with UK GDPR and the Data Protection Act 2018.

For any data-related enquiries, contact us at hello@lightworkecommerce.com.

2. Data We Collect

We may collect the following categories of personal data:

Identity data: name, job title, company name
Contact data: email address, phone number, postal address
Technical data: IP address, browser type, device type, pages visited (via analytics)
Communications data: messages sent via our contact form or email
Commercial data: details of services you have purchased or enquired about

We do not collect any special category data (such as health information, ethnicity, or biometric data).

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries submitted via our contact form
To provide and administer the services you have engaged us for
To send invoices and manage payment
To communicate about project progress and support requests
To comply with legal and regulatory obligations
To improve our website and services through analytics

We will never sell your data to third parties, and we will not use it for purposes incompatible with those listed above.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract: processing is necessary to fulfil our contractual obligations to you
Legitimate interests: responding to enquiries, improving our services, and maintaining business relationships
Legal obligation: complying with applicable laws and regulations
Consent: where you have explicitly consented, such as when submitting a contact form

We may share your data with trusted third parties in the following circumstances:

Service providers: tools we use to deliver our services (e.g. project management, email, invoicing software)
Professional advisers: accountants, solicitors, or insurers where necessary
Legal requirements: where required by law, court order, or regulatory authority

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal obligations. In practice, this means:

Client project data: retained for 7 years after the end of the engagement (for accounting and legal purposes)
Enquiry data (non-clients): retained for 12 months from the date of enquiry
Analytics data: retained in accordance with the analytics provider's policy

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Access: request a copy of the data we hold about you
Rectification: request correction of inaccurate data
Erasure: request deletion of your data where there is no compelling reason for continued processing
Restriction: request that we restrict processing of your data
Portability: request transfer of your data in a machine-readable format
Objection: object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@lightworkecommerce.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website may use cookies to improve your experience and gather analytics data. Cookies are small text files stored on your device. We use:

Essential cookies: necessary for the website to function correctly
Analytics cookies: to understand how visitors use our site (e.g. Google Analytics)

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure hosting, encrypted communications, and access controls.

No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO as required by law.

10. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this page reflects the most recent update. We will notify clients of material changes via email.

11. Contact

For any questions about this policy or how we handle your data, please contact us at hello@lightworkecommerce.com.