Privacy Policy

1. Who We Are

Etwrk Limited is registered in England and Wales (Company Registration No. 16389026), with a registered address at 124 City Road, London, EC1V 2NX. We are registered with the Information Commissioner's Office (ICO Registration No. ZB977379).

We are the data controller for personal data collected through our website and in the course of providing our services. For data protection enquiries, contact us at privacy@etwrk.com.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information — name, email address, phone number, and company name when you contact us or enquire about our services.
• Communications — the content of emails, messages, and other correspondence you send to us.
• Technical data — IP address and browser characteristics processed transiently when you submit our contact form, for bot and fraud protection purposes. See section 5.
• Professional data — information about your business, IT environment, and requirements that you provide in the course of engaging our services.

We do not knowingly collect personal data from children under 16. Our services are directed at business users.

3. Legal Bases for Processing

We rely on the following legal bases to process your personal data:

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.

4. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and provide quotations or proposals.
• Deliver the IT infrastructure services you have engaged us to provide.
• Manage our client relationship, including invoicing and communications.
• Comply with our legal and regulatory obligations.
• Send relevant updates or information about our services to existing clients (you can opt out at any time).

We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Sharing and International Transfers

We do not sell your personal data. We may share it with:

• Service providers acting as data processors on our behalf, including:
  • Google LLC — for Google Workspace (email, documents, and collaboration tools). Google Workspace data may be processed outside the UK; this is covered by Google's Data Processing Terms and Standard Contractual Clauses.
  • Cloudflare, Inc. — for website hosting, content delivery, and bot protection on our contact form. Cloudflare hosts this website and stores contact form submissions in a database located in the European Economic Area. It also processes technical data (IP address, browser signals) to verify that form submissions are made by a human and to protect the site from abuse. Transfers to the EEA are covered by the UK's adequacy regulations; where Cloudflare processes data in the United States, this is covered by Cloudflare's Data Processing Addendum and Standard Contractual Clauses. Cloudflare does not use this data for tracking or advertising.
• Professional advisers — accountants, lawyers, and insurers where necessary.
• Regulatory authorities — where required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Our general retention periods are:

• Client records and correspondence — 7 years from the end of the client relationship, in line with our legal and tax obligations.
• Enquiries that did not result in an engagement — 12 months from last contact.

After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — to request a copy of the personal data we hold about you.
• Rectification — to ask us to correct inaccurate or incomplete data.
• Erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it.
• Restriction — to ask us to restrict processing of your data in certain circumstances.
• Portability — to receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Object — to object to processing based on legitimate interests, including for direct marketing purposes.
• Withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@etwrk.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security and Security Breach Policy

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include access controls, encrypted communications, and limiting data access to those who need it for their work.

While we take security seriously, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us.

Security breach procedure. In the event of a personal data breach, we will:

• Assess the breach promptly upon discovery to determine its nature and scope.
• Notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of a breach that is likely to result in a risk to individuals' rights and freedoms, as required by UK GDPR Article 33.
• Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms, as required by UK GDPR Article 34.
• Take steps to contain and remediate the breach, and to prevent a recurrence.
• Document all breaches internally, including those that do not meet the threshold for ICO notification.

If you believe your personal data held by us has been compromised, please contact us immediately at privacy@etwrk.com.

9. Cookies

Our website does not use tracking, analytics, or advertising cookies, and we do not use analytics software of any kind. No cookie consent banner is displayed because none is required.

Our hosting and security provider, Cloudflare, may set strictly necessary cookies — for example __cf_bm — to distinguish automated traffic from genuine visitors and protect the site from abuse. These are exempt from the consent requirements of the Privacy and Electronic Communications Regulations because they are essential to delivering the service you have requested. They are not used to track you across websites or to build a profile of you.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website or services following an update constitutes acceptance of the revised policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please get in touch.