Privacy Policy

Last updated: 16 August 2026

1. Who we are

Trading name: THEED REWORK.CO
Data controller: Paul Theed
Website:
theedrework.co.uk
Email:
info@theedrework.co.uk

Paul Theed is the data controller responsible for personal
information processed through THEED REWORK.CO.

2. Personal information we may collect

The information we collect depends on how you interact with us.

When you contact us

If you use our contact form, email us or otherwise request help,
we may collect information such as:

• your name;
• your email address;
• your business or organisation name;
• your website address;
• details of the website problem, project or service you are asking about;
• messages and correspondence between you and us; and
• any other information you choose to provide.

When you become a client

If we agree to carry out work for you, we may also process
information needed to manage and deliver that work, including:

• project and service requirements;
• contact and billing information;
• quotes, invoices and payment records;
• technical information relating to your website, hosting, domain or connected services;
• support and project correspondence; and
• website access information where this is necessary to complete agreed work.

Where website, hosting or account access is required, we encourage
the use of temporary accounts, delegated access or temporary
passwords where possible.

Technical information

Our hosting and security infrastructure may process technical
information when you access this website. This can include
information such as your IP address, browser and device
information, requested pages, date and time of access, and
information required to identify or investigate technical and
security issues.

3. How we collect your information

We may collect personal information:

• directly from you when you complete a form, email us or communicate with us;
• when you request a quote, assessment or website service;
• while providing website services to you;
• automatically through the technical operation and security of this website; and
• through optional analytics technologies where you have given consent.

4. Why we use your information

Responding to enquiries and preparing quotes

We use information you provide to understand what help you need,
respond to your enquiry and, where appropriate, prepare a quote
or proposal.

Our lawful basis will normally be taking steps at your request
before entering into a contract and, where applicable, our
legitimate interests in responding to genuine business enquiries
and operating our business.

Providing our services

Where you become a client, we use relevant information to provide
the website support, fixes, improvements or development services
you have requested.

Our lawful basis is normally the performance of a contract with
you or taking steps connected with that contract.

Administration, accounting and legal obligations

We may process information to maintain business records, manage
invoices and payments, meet accounting and tax requirements,
resolve disputes and comply with legal obligations.

Depending on the circumstances, our lawful basis may be compliance
with a legal obligation, performance of a contract or our
legitimate interests in managing and protecting our business.

Website security and operation

Technical information may be processed where necessary to operate,
maintain, diagnose, secure and protect our website and systems.

We rely on our legitimate interests in maintaining the security
and reliable operation of our website and business systems.

Website analytics

We use Google Analytics only where you have given your consent
through our cookie banner.

Our lawful basis for optional analytics processing is
consent.

5. Contact forms and email

When you submit an enquiry through our website, we use the
information you provide to respond to you and deal with your request.

Your enquiry may also be transmitted to and stored within our
business email systems.

Submitting a contact form does not subscribe you to marketing
communications.

6. Cookies and Google Analytics

We use necessary technologies to operate this website and remember
your privacy choices.

We also use Google Analytics 4 (GA4) to understand
how visitors use the website and help us improve it.

Google Analytics is optional. It is blocked unless and until you
select Accept analytics through our cookie banner.

If you reject analytics, Google Analytics will remain disabled and
analytics cookies will not be set by this website.

If you accept analytics, Google Analytics may process information
about your visit, including:

• pages you visit;
• how you interact with the website;
• your browser and device type;
• general geographic information;
• referral and traffic-source information; and
• analytics identifiers stored in cookies.

Google states that Google Analytics does not log or store individual
IP addresses from users in the United Kingdom.

You can withdraw or change your analytics consent at any time using
the Cookie settings control on this website.

Your cookie preferences may be remembered by the website so that
you do not have to make the same choice on every visit. You can
change your choice sooner using the Cookie settings control.

For more information about the cookies and technologies used on
this website, please see our
Cookie Policy.

7. Who we share information with

We do not sell your personal information.

We may use trusted third-party providers where this is necessary
to operate our website, communicate with clients, protect our
systems or provide our services.

These may include:

IONOS

IONOS provides website hosting, infrastructure and business email
services used by THEED REWORK.CO.

Google

We use Google services including:

• Google Analytics for optional website analytics
  where you have consented; and
• Google Drive as part of our website backup
  arrangements.

Website management and technical providers

We may use reputable website-management, security, backup and
technical service providers where necessary to operate, maintain
or protect our website.

Professional advisers and authorities

We may disclose relevant information to accountants, legal advisers,
insurers, professional advisers or public authorities where this is
reasonably necessary or required by law.

We only share personal information where there is an appropriate
reason for doing so and limit the information shared to what is
reasonably necessary.

8. International data transfers

Some of the technology providers we use operate internationally,
and personal information may therefore be processed outside the
United Kingdom.

Where personal information is transferred outside the UK, we take
reasonable steps to ensure that the transfer is made in accordance
with applicable UK data protection law.

This may include relying on UK adequacy regulations or appropriate
contractual safeguards provided for under UK data protection law.

9. How long we keep your information

We keep personal information only for as long as it is reasonably
required for the purpose for which it was collected, including any
legal, accounting, security or contractual requirements.

Enquiries

If an enquiry does not result in client work, we will normally
retain relevant correspondence for no longer than
12 months after the last meaningful contact,
unless there is a legitimate reason to retain it for longer.

Client and project records

Where you become a client, relevant project, contractual,
accounting and invoice records may normally be retained for up to
six years where necessary for accounting, tax,
contractual or legal purposes.

Website access credentials

Access credentials provided for client work are retained only for
as long as reasonably necessary to perform the agreed services.

Where possible, temporary access will be removed, revoked or
returned to the client once the relevant work has been completed,
unless ongoing access has been agreed as part of a continuing service.

Google Analytics

Analytics information is retained according to the settings applied
to our Google Analytics property and Google’s applicable retention
controls.

We periodically review the personal information we hold and delete
or anonymise information that is no longer reasonably required.

10. How we protect your information

We take reasonable technical and organisational measures to protect
personal information against unauthorised access, accidental loss,
misuse, alteration or disclosure.

Measures used may include:

• encrypted HTTPS connections;
• controlled administrative access;
• strong account security;
• software and security maintenance;
• website backups;
• restricted access to business systems; and
• the use of reputable hosting and technology providers.

No internet-connected system can be guaranteed to be completely
secure, but we take proportionate steps to protect the information
entrusted to us.

11. Your data protection rights

Depending on the circumstances and the lawful basis being used,
UK data protection law may give you rights including:

• Right of access – to request a copy of personal
  information we hold about you.
• Right to rectification – to ask us to correct
  inaccurate or incomplete information.
• Right to erasure – to ask us to delete your
  personal information in certain circumstances.
• Right to restriction – to ask us to restrict how
  your information is used in certain circumstances.
• Right to data portability – to receive certain
  information in a portable format where this right applies.
• Right to object – to object to certain processing,
  including some processing based on legitimate interests.
• Right to withdraw consent – where processing is
  based on consent, you can withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing
that took place before consent was withdrawn.

To exercise a data protection right, email
info@theedrework.co.uk.

12. Complaints

If you have concerns about how we handle your personal information,
please contact us first so that we have an opportunity to address
the issue.

You also have the right to raise a complaint with the Information
Commissioner’s Office, the UK data protection regulator.

Make a complaint to the Information Commissioner’s Office

13. Automated decision-making

We do not currently use your personal information to make solely
automated decisions that produce legal or similarly significant
effects on you.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our services, website,
technology providers or data-processing practices change, or where
changes to law or regulatory guidance require an update.

The latest version will always be published on this page and the
date at the top will be updated when appropriate.

15. Contact us

If you have questions about this Privacy Policy, your personal
information or your data protection rights, contact:

Paul Theed
Trading as THEED REWORK.CO
Email:
info@theedrework.co.uk