Privacy Policy

Last Updated: 19th May 2025

1. Introduction

Lucy Standbridge trading as Iris Web Media (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring transparency in how personal data is collected, used, and stored. This privacy policy explains how we handle your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

In Short:

We only process your information with your consent, to comply with legal obligations, to provide services, protect your rights, or fulfil business requirements.

2. What Information We Collect

Personal Information Provided by You

When you use or purchase our services, we may collect:

• Name (first and last)
• Billing address
• Phone numbers
• Email addresses
• Business details (company name, website information)
• Any additional information you provide for service delivery

Information Collected Automatically

When you visit, use, or navigate our website, we collect certain technical data that does not directly identify you but helps improve security, functionality, and user experience. This may include:

• Device and usage data (IP address, browser type, operating system, referring URLs)
• Geolocation information (country, general location)
• Site interaction details (how and when you engage with our services)
  This information helps us maintain security and optimise user experience.

Cookies & Online Identifiers

Like many businesses, we use cookies and tracking technologies to improve website functionality, analytics, and marketing. The identifiers we collect may include:

• IP addresses
• Cookie identifiers (used for analytics and advertising)
• Device characteristics (to optimise website performance)
  For more details, please refer to our Cookies Policy.

3. How We Use Your Data

We process your personal data for the following purposes:

• Facilitating account creation & log-in (including third-party logins like Google or Facebook)
• Sending marketing communications (with your consent; you can opt out at any time)
• Providing administrative updates (on services, policy changes, and new features)
• Fulfilling & managing orders (including payments, refunds, and customer service)
• Ensuring security & fraud prevention
• Legal compliance & enforcement of terms
• Managing user accounts
• Delivering requested services
• Responding to enquiries & customer support needs
• Business improvements (including data analysis and trend evaluation)

We may store and process anonymised data for research, service improvements, and business analysis. Identifiable personal information will never be used without consent.

4. Legal Basis for Processing Data

We process or share your data under the following legal grounds:

• Consent: You have given explicit consent for us to process your data for a specific purpose.
• Legitimate Interests: Data processing is necessary for our legitimate business operations.
• Performance of a Contract: If you have entered into a contract with us, we process your personal information to fulfil the agreement.
• Legal Obligations: We may disclose your data if required by law, judicial proceedings, or regulatory compliance.
• Vital Interests: We may process data to prevent fraud, ensure security, or enforce policies.

5. Data Sharing & Third Parties

We do not sell personal data. However, your information may be shared with:

• Trusted service providers (payment processors, hosting providers, analytics tools)
• Legal authorities (if required by court order or subpoena)
• Third-party platforms (Google Analytics, email marketing services, etc.)

All third-party partners operate under strict contracts, ensuring your data is securely managed and used only for its intended purpose.

6. Data Security & Retention

We employ strong security measures to protect your data from unauthorised access, loss, or misuse. Your information is retained only for as long as necessary to meet business obligations or comply with regulations.

7. Your Rights Under UK GDPR

Under UK GDPR, you have the right to:

• Access your personal data
• Request corrections to inaccurate information
• Withdraw consent for marketing communications
• Request deletion of your data (where applicable)
• Object to data processing for legitimate interests

You can exercise these rights by contacting us directly.

8. Do We Collect Information from Minors?

In Short: We do not knowingly collect or market to children under 18 years of age.

By using our services, you confirm that you are at least 18 years old, or that you are a parent or guardian providing consent for a minor. If we discover personal information has been collected from users under 18, we will delete the data and take appropriate action.

If you believe we have collected information from a child under 18, please contact us at contact@iriswebmedia.co.uk.

9. Do We Make Updates to This Policy?

In Short: Yes, we update this policy as necessary to remain compliant with relevant laws.

We may revise this privacy policy periodically. Any updates will be indicated by a “Last Updated” date, and the revised version will take effect as soon as it is published.

If we make significant changes, we may notify you via a prominent notice on our website or a direct communication. We recommend checking this policy regularly to stay informed.

10. How Can You Contact Us About This Policy?

If you have any questions or concerns regarding this privacy policy, you can reach us at:

📩 contact@iriswebmedia.co.uk

For postal enquiries, our address is available upon request.

11. How Can You Review, Update, or Delete Your Data?

Depending on applicable laws, you may have the right to access, update, or delete the personal information we collect.

To request a review, update, or deletion of your personal data, please contact contact@iriswebmedia.co.uk. We will respond within 7 working days.