Privacy Policy
What we collect, why we collect it, and what you can ask us to do about it. Written to be read, not to be survived.
Last updated 6 August 2026
Who we are
WebCurry is a web and AI agency based in Hitchin, Hertfordshire. For the purposes of UK data protection law we are the data controller for the personal data described on this page.
- Trading as WebCurry
- Studio: Design Studio, 52 Walsworth Road, Hitchin, Hertfordshire SG4 9SX
- Contact: [email protected]
What this website collects
This website does not track you. It sets no cookies, runs no analytics, embeds no third-party scripts and has no contact form. Fonts are served from our own domain rather than fetched from a font provider, so simply reading these pages does not report anything about you to anyone.
Our hosting provider keeps standard server logs, which include IP addresses, for a short period. These are generated automatically by the infrastructure to keep the site available and to defend it against attack. We do not use them to build a profile of you.
What we collect when you contact us
Every enquiry route on this site is an email link. When you write to us we receive whatever you choose to include, typically your name, your email address, and what you tell us about your project.
- What we do with it: reply to you, and keep the thread so we have context if you come back to us later.
- Our lawful basis: legitimate interests. You contacted us about work, and answering you is the obvious expectation on both sides.
- How long we keep it: up to two years after our last exchange, unless you become a client or you ask us to delete it sooner.
What we collect when you become a client
Working on a project means holding rather more: contact details for the people we deal with, billing information, and access to whatever systems the work requires.
- Our lawful basis for delivering the work is performance of a contract.
- Our lawful basis for keeping invoices and accounting records is a legal obligation, and those are held for six years as UK tax rules require.
- Where a project gives us access to your customers' personal data, we act as a processor on your behalf rather than as a controller. That relationship is set out on the GDPR page.
Who else can see your data
We do not sell personal data and we do not share it for anyone else's marketing. We do rely on a small number of suppliers to run the business, and each of them is bound by contract to protect what they handle.
| Supplier | Purpose | Where |
|---|---|---|
| Netlify | Hosting for this website | United States, under UK and EU transfer safeguards |
| Cloudflare | Content delivery, DNS and protection against attacks | Global network, under UK and EU transfer safeguards |
| Business email and, where a client asks for it, Analytics | United States, under UK and EU transfer safeguards | |
| Stripe | Card payments on shops we build, where that applies | United States and Ireland, under UK and EU transfer safeguards |
| Anthropic | The Claude models behind AI features we build | United States, under UK and EU transfer safeguards |
Some of these suppliers are based outside the United Kingdom. Where personal data is transferred abroad, it is protected by the safeguards UK law recognises, which in practice means an adequacy decision or the International Data Transfer Agreement.
Your rights
UK GDPR gives you real, enforceable rights over your personal data. You can exercise any of them by emailing us. We will respond within one month, and we will not charge you for it.
- Ask for a copy of the personal data we hold about you.
- Ask us to correct anything inaccurate or incomplete.
- Ask us to delete it, where we have no overriding reason to keep it.
- Ask us to restrict how we use it while a concern is resolved.
- Object to processing we carry out on the basis of legitimate interests.
- Ask for your data in a portable, machine-readable format.
Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain directly to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk. Contacting us first is not a condition of complaining to them.
Changes to this policy
If we start collecting anything we do not collect today, for example if we add analytics or a contact form, we will update this page and change the date at the top before that goes live rather than afterwards.