This policy explains how We Manage Web collects, uses and protects personal data when you visit our website, contact us, subscribe to our emails or work with us as a client or supplier. If you have any questions, please get in touch.
Who we are
We Manage Web is the trading name of Northern Web Lab Limited, registered in England and Wales (company no. 10517889). Our address is Cotton Ct, Church St, Preston PR1 3BY.
We are the data controller for the personal data described in this policy. Our ICO registration number is ZA916033.
For anything about your personal data, email [email protected] or call 01772 287 403.
Who this policy covers
- People who visit our website
- People who contact us or ask for a quote
- People who subscribe to our emails
- Our clients and their staff, and our suppliers
Our services are for businesses and organisations. Our website is not aimed at children.
Data we look after for our clients
When we manage, host or support a client’s website, we may have access to personal data on that website, such as its customers or users. For that data, our client is the controller and we act as their processor. We only use it to provide the services they’ve asked for, under our Service Level Agreement. If your data is held on one of our clients’ websites, please contact that organisation first.
What personal data we collect
- Contact details: your name, business name, email address, phone number and website, when you fill in our contact form, email or call us. Contact form enquiries are emailed to us and stored on our website server.
- What you tell us: the details of your enquiry or project.
- Client account information: contact details for the people we work with, contracts, invoices and payment records, and our correspondence with you.
- Newsletter: your email address and name, and whether you open or click our emails.
- Website usage: information collected by cookies and similar technologies, such as pages visited, device and browser type, and approximate location. See our Cookie Policy.
- Security information: IP addresses and login attempts, used to protect our website and the websites we manage.
We don’t ask for special category data (such as health information), and we ask you not to send it to us.
How we use your data and our lawful basis
| What we use it for | Lawful basis |
|---|
| Replying to enquiries and preparing quotes | Legitimate interests (responding to people who contact us), or steps before entering a contract |
| Providing our services to clients, invoicing and account management | Contract |
| Keeping financial and tax records | Legal obligation |
| Sending our newsletter and marketing emails | Consent |
| Analytics cookies | Consent, through our cookie banner |
| Keeping our website and the websites we manage secure | Legitimate interests (security and fraud prevention) |
| Improving our services and website | Legitimate interests |
Where we rely on consent, you can withdraw it at any time. This doesn’t affect anything we did before you withdrew it.
Marketing
We only send marketing emails to people who have signed up to our newsletter and confirmed their subscription. You can unsubscribe at any time using the link in any of our emails.
We don’t currently use advertising or remarketing cookies. If we start, we’ll only do so with your consent and will update this policy first. You can change your cookie choices at any time using the cookie settings link on our Cookie Policy page.
Who we share your data with
We never sell your personal data. We share it only with trusted service providers who process it on our behalf, under contracts that require them to keep it secure and use it only for the services they provide to us:
| Provider | What they do |
|---|
| Our website hosting provider | Hosting our website, contact form enquiries and backups |
| Cloudflare | Website security and performance |
| Google (Workspace, Analytics, Tag Manager) | Email, documents and website analytics |
| Email marketing platforms (Klaviyo, Mailchimp and MailPoet) | Sending our newsletter |
| CookieYes | Managing cookie consent |
| Anthropic (Claude) and OpenAI (ChatGPT Business) | AI tools that support our work. See our AI Policy |
| Xero | Invoicing and payments |
| Adobe Sign | Signing client agreements |
We may also share data with professional advisers such as our accountants and solicitors, or where the law requires it.
Transfers outside the UK
Some of our providers process data outside the UK, including in the United States. When they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations (including the UK-US Data Bridge), or the UK International Data Transfer Agreement or Addendum.
How long we keep your data
| Data | How long |
|---|
| Enquiries that don’t lead to work | 2 years from our last contact |
| Client records and contracts | 6 years after our work together ends |
| Financial and tax records | 6 years, as required by law |
| Newsletter subscriptions | Until you unsubscribe |
| Website backups | 30 days |
| Cookie data | See our Cookie Policy |
How we keep your data secure
We use appropriate technical and organisational measures to protect personal data. These include encrypted connections, access controls with strong passwords, limited login attempts, automatic blocking of suspicious IP addresses, daily malware scanning and regular backups. Only people who need access to your data for their work can see it.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted
- Restrict how we use your data
- Object to how we use your data, including for direct marketing
- Receive your data in a portable format
- Withdraw your consent at any time, where we rely on consent
To use any of these rights, contact us using the details above. We’ll respond within one month. There’s normally no charge.
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date below shows when it last changed. If we make a significant change that affects our clients, we’ll tell them directly.
Last updated: 6 November 2026