Privacy policy.

01Who we are

Infinity Web Ltd. ("Infinity Web", "we", "us") is a digital agency providing web development, e-commerce, AI, cloud, security and managed IT services. For the purposes of data-protection law, we are the data controller of the personal data described in this policy.

02Information we collect

We only collect what we need to run our business and serve you well. Depending on how you interact with us, that may include:

• Details you give us — your name, email, phone number, company and the contents of any project brief or message you send through our forms.
• Project & account data — information you share with us during an engagement, including files, credentials and content needed to deliver the work.
• Usage data — pages visited, links clicked, approximate location, browser and device type, collected via cookies and analytics.
• Communications — emails, calls and messages exchanged with our team.

We do not knowingly collect special-category data (such as health or biometric data) through this site, and we ask that you don't send it to us unless it's strictly necessary for an agreed project.

03How we use your information

We process your personal data for the following purposes, each with a lawful basis under the GDPR:

• To respond to enquiries and prepare proposals — on the basis of taking steps at your request before entering a contract.
• To deliver our services and manage our engagement with you — to perform our contract.
• To improve and secure the site and understand how it's used — our legitimate interest in running a safe, effective business.
• To send relevant updates about our work, where you've asked to hear from us — on the basis of your consent, which you can withdraw at any time.
• To meet legal and accounting obligations — to comply with the law.

04Cookies & analytics

We use cookies and similar technologies to run the site, remember your preferences, and measure performance. You're in control: you can accept, reject or fine-tune non-essential cookies at any time.

05Sharing & disclosure

We never sell your personal data. We share it only where necessary, and only with parties who are bound to protect it:

• Service providers who help us operate — hosting, email, analytics, payment and support tools — acting as our processors under contract.
• Professional advisers such as accountants and lawyers, where reasonably required.
• Authorities, if we're legally obliged to disclose, or to protect our rights, safety and property.

06International transfers

Some of our providers operate outside your country. Where we transfer personal data across borders, we put appropriate safeguards in place — such as the European Commission's Standard Contractual Clauses or an equivalent mechanism — so your data stays protected to the same standard.

07How long we keep it

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires. Enquiry data is typically held for up to 24 months; engagement and financial records are kept for the periods required by tax and contract law. When data is no longer needed, we securely delete or anonymise it.

08How we protect it

We apply appropriate technical and organisational measures — encryption in transit, access controls, least-privilege practices and regular reviews — to guard against loss, misuse and unauthorised access. No system is perfectly secure, but security is something we engineer for, not bolt on.

09Your rights

Under data-protection law you have the right to:

• Access the personal data we hold about you.
• Correct data that's inaccurate or incomplete.
• Erase your data, where there's no overriding reason to keep it.
• Restrict or object to certain processing, including direct marketing.
• Portability — receive your data in a usable format.
• Withdraw consent at any time, without affecting prior processing.

You also have the right to complain to your local data-protection authority.

10Children's privacy

Our site and services are intended for businesses and adults. We don't knowingly collect personal data from children under 16. If you believe a child has provided us with data, contact us and we'll delete it.

11Changes to this policy

We may update this policy from time to time as our practices or the law evolve. When we make material changes we'll update the date at the top and, where appropriate, let you know. Please check back periodically.