Legal
Privacy Policy
This website is operated by Equy Ltd, a company registered in England & Wales (company number 17347459), registered office 12 Hall View, Crook, DL15 0XF, United Kingdom. In this policy, "we", "us" and "our" refer to Equy Ltd.
This policy explains what personal data we collect through this website and in the course of providing software development and hosting services, why we hold it, how long we keep it, and what you can require us to do with it.
1. Who is responsible for your data
Equy Ltd is the data controller for the personal data described in this policy.
- Controller: Equy Ltd (company number 17347459)
- Registered office: 12 Hall View, Crook, DL15 0XF, United Kingdom
- Email for data protection queries: [email protected]
- Telephone: +44 7828 783 057
We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the UK GDPR. Data protection queries go to the email address above and are handled by a director.
2. What personal data we collect
Data you give us directly
- Enquiry form on this website: your name, your email address, the services you tick as being of interest, and the content of the message you write.
- Email and telephone: anything you choose to include when you contact us, including your telephone number and the name of the organisation you represent.
- Clients under contract: the contact details of the people we deal with at your organisation, billing details, and correspondence relating to the work.
Data collected automatically
- Server logs: our hosting provider records the IP address, browser user-agent, requested page and timestamp of requests to this website, as a standard security and troubleshooting measure.
- Local storage: when you answer the cookie notice, your choice is stored in your
browser's local storage under the key
equy_cookie_consent. It does not leave your device and does not identify you.
Data we do not collect
This website runs no analytics, advertising, remarketing or social media tracking. We do not build visitor profiles, and we do not use special category data (health, ethnicity, political opinions and the like). Please do not send us special category data through the enquiry form.
3. Why we process it, and on what lawful basis
Article 6 of the UK GDPR requires a lawful basis for every processing purpose. Ours are set out below.
| Purpose | Data used | Lawful basis (Art. 6) |
|---|---|---|
| Replying to an enquiry and preparing a quote | Name, email, services selected, message | Legitimate interests (Art. 6(1)(f)) — responding to someone who has approached us about our services |
| Delivering development, hosting and support work under a contract | Client contact details, correspondence, technical account data | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and statutory record-keeping | Billing contact details, invoices, payment records | Legal obligation (Art. 6(1)(c)) — UK tax and company law |
| Keeping this website secure and available | IP address, user-agent, request logs | Legitimate interests (Art. 6(1)(f)) — network and information security |
| Remembering your cookie choice | A single local storage value | Strictly necessary — it exists only to honour the preference you set, and stores no identifier |
Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. You may object to that processing at any time — see section 8.
4. How long we keep it
- Enquiries that do not become work: 24 months from the last contact, then deleted.
- Client records and correspondence: for the duration of the engagement and 6 years afterwards, to cover the limitation period for contractual claims in England & Wales.
- Invoices and accounting records: 6 years from the end of the accounting period they relate to, as required by the Companies Act 2006 and HMRC rules.
- Web server logs: 30 days, then overwritten.
- Cookie choice in local storage: until you clear your browser storage. You can remove it at any time in your browser settings.
5. Who we share it with
We do not sell your personal data, and we do not share it for anyone else's marketing. We use a small number of suppliers who process data on our instructions, under written contracts that meet Article 28 of the UK GDPR:
| Supplier | Role | Data involved |
|---|---|---|
| Our hosting and email providers (UK and EU data centres) | Hosting this website and our business email | Enquiry contents, correspondence, server logs |
| Google LLC — Google Fonts | Serves the typefaces used on this website | Your IP address and browser user-agent, at the moment the font file is requested |
| Cloudflare, Inc. — cdnjs | Serves the animation library used on this website | Your IP address and browser user-agent, at the moment the script is requested |
| esm.sh | Serves the graphics library used for the background on the home page | Your IP address and browser user-agent, at the moment the script is requested |
| Our accountant | Statutory accounts and tax filings | Invoices and billing details |
None of the three content delivery networks above set cookies on this website. They necessarily see your IP address, because your browser connects to them directly to fetch the file.
We will also disclose personal data where we are legally required to — for example to HMRC, a regulator, or a court order.
6. International transfers
Our own hosting and email are in the United Kingdom and the European Economic Area.
The three content delivery networks named in section 5 (Google, Cloudflare and esm.sh) operate globally, so a request from your browser may be served from, and logged on, infrastructure outside the UK, including in the United States. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, and — for transfers to the United States — the UK Extension to the EU-US Data Privacy Framework where the recipient is certified under it. The only data involved is the IP address and user-agent of the request.
7. Security
This website is served over HTTPS. Access to enquiry data and client records is limited to the people at Equy Ltd who need it, protected by multi-factor authentication, and backed up to encrypted storage. We test restores from those backups quarterly. No system is perfect; if a breach occurs that is likely to result in a risk to your rights, we will report it to the Information Commissioner's Office within 72 hours and tell you directly where the law requires it.
8. Your rights
Under the UK GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected and incomplete data completed.
- Erasure — have your data deleted, where we have no overriding legal reason to keep it.
- Restriction — have us pause processing while a dispute about accuracy or legitimate interests is resolved.
- Portability — receive data you gave us in a structured, machine-readable format, where processing is based on consent or contract.
- Objection — object to processing carried out on the basis of legitimate interests, including at any time for direct marketing.
- Withdraw consent — where we rely on consent, withdraw it at any time, without affecting processing already carried out. You can change or withdraw your cookie choice on this website by clearing your browser's local storage for this domain, which makes the notice appear again.
- Not be subject to automated decision-making — we do not carry out automated decision-making or profiling with legal or similarly significant effects.
9. How to exercise your rights
Write to [email protected] or to Equy Ltd, 12 Hall View, Crook, DL15 0XF. Tell us what you want and enough detail to find your records. We will respond within one month of receiving the request, as required by the UK GDPR. If the request is complex we may extend that by up to two further months, and we will tell you why within the first month. There is no charge unless a request is manifestly unfounded or excessive.
10. Complaining to the ICO
If you are unhappy with how we have handled your data, please raise it with us first — most things are resolved quickly. You also have the right to complain to the UK supervisory authority:
- Information Commissioner's Office (ICO)
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Helpline: 0303 123 1113
- www.ico.org.uk
Complaining to the ICO does not affect any other legal remedy available to you.
11. Cookies
This website sets no analytics, advertising or tracking cookies. The full detail of what is stored on your device, and how to remove it, is in our Cookie Policy.
12. Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. Where a change materially affects you, we will tell clients under contract directly. This version takes effect on 2 August 2026.