- Web Design & Digital Growth
- 020 3918 3829 |
- 07821 004213 | Open 24/7
Last updated: 14 September 2026.
This notice explains how Core Web UK uses personal information when you visit our website, contact us, order services or receive website support. It covers our own business records. When we handle your customers' data on your instructions while maintaining your website, the relevant service and data-processing agreement also applies.
Toufik Beladi, trading as Core Web UK, is the controller of personal information used for our own business purposes. We are a sole-trader business at 125 Lower Addiscombe Road, Croydon, CR0 6PU, United Kingdom. Email info@corewebuk.co.uk, contact privacy@corewebuk.co.uk for privacy enquiries, or call 07821 004213.
Enquiries and service records may include your name, business name, email, phone number, address, website address, messages, project requirements, quotations, instructions, approvals and support history. Orders may include billing details, products or services purchased, amounts, payment status, transaction references and refund records. If you create an account, we also hold information needed to manage it.
Website visits can generate technical information such as IP address, browser and device details, pages requested, referring pages and security logs. Google advertising technology may process identifiers and information about ad interactions and website activity. The consent manager records privacy choices. See our Cookie Policy for details.
For repairs or maintenance, we may need authorised website, hosting or domain access and may encounter personal information within the systems being supported. Please avoid sending unrelated personal information, full payment-card details or sensitive records in ordinary enquiries.
We use enquiry and project information to discuss requirements, provide quotations and deliver agreed work. Our lawful basis is taking steps at your request before a contract or performing a contract with you. Where you represent a business rather than contracting personally, we rely on our legitimate interests in communicating with that business and supplying its services.
Our legitimate interests also include keeping the website secure, preventing fraud, administering customer relationships, resolving disputes and maintaining appropriate service records. We assess these interests against individuals' rights. Financial record keeping and responding to binding legal requirements rely on legal obligation where applicable.
Optional advertising-related processing relies on consent where required. Newsletter subscriptions rely on your consent. You can withdraw consent without affecting the lawfulness of earlier processing. We do not make acceptance of optional marketing a condition of purchasing a service.
The website uses WooCommerce for orders and WooPayments for online payments. WooPayments involves Automattic and Stripe payment infrastructure. The chosen payment method may involve additional providers, such as Apple Pay, Google Pay, Amazon Pay, Klarna or Clearpay, where available. These providers receive the information needed to process payments, authenticate transactions and prevent fraud. Their own privacy notices also apply.
We receive order and payment information needed to manage your purchase, such as payment status, transaction identifiers and limited payment-method details. We do not store full card numbers or card security codes in our ordinary customer records. Do not send those details by email, WhatsApp or our contact form.
We use Google Ads to promote our services. Google tags can support advertising measurement, including understanding whether ad visits lead to enquiries or purchases. Depending on your choices and the features in use, Google may receive device or browser information, identifiers, page addresses and interaction information. Google explains its processing at How Google uses information from sites or apps that use its services.
Our site uses the InMobi Choice consent manager. Use “Disagree” to refuse optional processing, “More options” to inspect purposes and partners, or the “Privacy” control to revisit your choices. Advertising-related storage and access requires consent; the existence of a banner does not make every listed purpose essential. The consent panel provides details of the partners and purposes presented for your choice.
Information may be handled by Hostinger for website hosting, our email and communications providers, WooPayments/Automattic and Stripe for payments, the provider of a payment method you select, Google for advertising-related processing, and InMobi for consent management. Professional advisers, authorised service contractors or public authorities may receive relevant information where needed for the service or a legal obligation.
If you contact us through WhatsApp, a social platform or another external service, that provider processes information under its own terms and privacy notice. We use the information we receive to respond and deliver the requested service. We do not describe these channels as involving no third parties.
We do not sell or rent our customer contact list. Advertising-related sharing is described separately above and in the consent controls.
Access is used for the agreed investigation, repair or ongoing service. Where possible, provide a named account with only the permissions needed. Temporary access should be removed or changed after the work ends unless ongoing support has been agreed. Some service correspondence and activity records may need to be retained for support, security or legal purposes even after access is revoked.
Where we process personal data on a client's behalf, we act on documented instructions and the agreed data-processing terms. Those terms should cover authorised access, confidentiality, security, subcontractors, assistance with rights and incidents, and return or deletion at the end of the service.
Some providers operate internationally and may process information outside the UK. The applicable arrangements depend on the provider, service and account configuration. Where a restricted international transfer occurs, UK data protection law requires an appropriate transfer mechanism, such as applicable adequacy regulations or approved contractual safeguards. Contact privacy@corewebuk.co.uk for details of the arrangements relevant to your information and how to obtain a copy of applicable safeguards.
Our normal retention periods are up to 12 months for enquiries that do not become client work and up to six years for relevant client, invoice and contractual records where needed for tax, accounting or legal purposes. The starting point and any longer legal requirement depend on the record. We keep subscription details until you unsubscribe and may retain a minimal suppression record so we do not contact you again against your wishes.
Technical logs, consent records, backups and access information are retained according to their security, operational and evidential purpose, with access limited as appropriate. Records needed for an active dispute or legal obligation may be kept longer. We use appropriate technical and organisational measures to protect information, but no online system can be guaranteed risk-free.
Depending on the circumstances, you can request access, correction, deletion, restriction, or portability of your personal information. You may also withdraw consent. Some rights have exceptions, for example where financial records must be retained by law.
You can object at any time to use of your information for direct marketing. You can also object to processing based on legitimate interests because of your particular situation. Contact privacy@corewebuk.co.uk or info@corewebuk.co.uk. To stop a newsletter, use its unsubscribe option or contact us. To change website advertising consent, use the “Privacy” control.
We respond to rights requests within the applicable legal deadline, normally one month. We may need proportionate identity checks or clarification and will explain any lawful extension. You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/. You do not have to complain to us first.
You do not have to provide optional marketing information. However, without necessary contact, billing or authorised access information, we may be unable to quote, process an order or carry out the requested work. We explain what is needed in the relevant enquiry or service process.
We update this notice when our processing changes. Material new uses may require further information or consent. The date at the top identifies this version.
