01 Who we are
This website is operated by Wokingham IT Limited trading as digital thing, a company registered in England and Wales under company number 11988326.
Our registered office is Level 2 Easthampstead Works, Town Square, Bracknell, Berkshire, RG12 1BH.
We are the controller of the personal data described in this policy. For privacy enquiries, email projects@digitalthing.co.uk.
We have not appointed a Data Protection Officer because we are not required to do so. We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
02 Personal data we collect
Depending on how you interact with us, we may collect:
- Names and job titles.
- Business email addresses and telephone numbers.
- Company, billing and payment details.
- Information submitted through enquiry and contact forms.
- Account login and access information.
- Information provided in support requests.
- IP address, browser, device and technical information.
- Website usage and analytics information.
- Marketing and communication preferences.
- Recorded calls, where recording is used and you have been informed.
Our services are not aimed at children and we do not intentionally collect children’s data. We do not normally require special category personal data, and you should not submit sensitive personal information unless it is necessary and we have agreed how it will be handled.
Payments may be processed by Stripe. We do not store full payment card details on our systems.
03 How we use personal data
Where we rely on legitimate interests, those interests include operating and improving our business, protecting our systems, supporting customers, preventing fraud and establishing or defending legal claims. We balance those interests against your rights and freedoms.
We do not currently use personal data for promotional direct marketing.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and preparing quotations | Taking steps at your request before entering into a contract |
| Providing services and administering Work Orders | Performance of a contract |
| Customer support and account management | Performance of a contract and legitimate interests |
| Billing, debt recovery and fraud prevention | Performance of a contract and legitimate interests |
| Security, monitoring and service improvement | Legitimate interests and, where applicable, legal obligation |
| Sending service notices | Performance of a contract or legitimate interests |
| Case studies, testimonials and portfolio material | Consent, where required, or legitimate interests where appropriate |
| Legal claims, regulatory compliance and dispute resolution | Legal obligation and legitimate interests |
04 Cookies and analytics
Our website currently uses only cookies and similar technologies that are strictly necessary for its operation, security and functionality.
Under regulation 6 of the Privacy and Electronic Communications Regulations, consent is not required for cookies that are strictly necessary to provide a service requested by the user.
We do not currently use a consent management platform or embed services such as YouTube, Vimeo, Google Maps, reCAPTCHA, social feeds or live chat.
If we activate analytics, advertising pixels or other non-essential tracking, we will update this policy and obtain consent where required before those technologies are used.
05 Who receives personal data
We may share personal data with:
- Google Workspace.
- Xero.
- Stripe.
- Analytics and advertising providers, but only where their services are active and used lawfully.
- Professional advisers, insurers, auditors and debt recovery providers.
- IT, hosting, security and technical service providers.
- Courts, regulators and law enforcement bodies where required.
- Suppliers and subcontractors involved in providing our services.
We do not sell personal data.
06 International transfers
We aim to keep personal data within the United Kingdom, but some suppliers may process it in other countries.
Where personal data is transferred internationally, we use a lawful transfer mechanism and appropriate safeguards, such as adequacy regulations or approved contractual clauses.
07 How long we keep personal data
We generally retain business records for up to six years, unless a different period is required by law or is necessary for legal claims. This may include:
- Website enquiries and correspondence.
- Customer and contract records.
- Invoices and accounting information.
- Support tickets.
- Marketing, consent and preference records.
- Analytics records.
- Call recordings.
- Server and security logs.
We may keep information for longer where required for legal, regulatory, tax, accounting or dispute-resolution purposes. When data is no longer needed, it is securely deleted or anonymised.
08 Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access is limited to people who need the information for legitimate business purposes and who are subject to confidentiality obligations. No internet-based service can be guaranteed to be completely secure.
09 Your rights
Depending on the circumstances, you may have the right to:
- Request access to your personal data.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete personal data.
- Ask us to restrict processing.
- Object to processing based on legitimate interests.
- Request data portability.
- Withdraw consent at any time where processing relies on consent.
- Complain to the Information Commissioner’s Office.
To exercise a right, email projects@digitalthing.co.uk. We may need to verify your identity before responding.
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
10 Third-party websites
Our website may link to websites operated by other organisations. We are not responsible for their privacy practices, and you should read their privacy information before providing personal data.
11 Changes to this policy
We may update this policy from time to time to reflect changes to our services, suppliers or legal obligations. The latest version will always be published on this page with its updated date.