The legal stuff
Privacy Policy
How we collect, use and protect your personal data, and the rights you have over it.
Last updated: 2 October 2026
1. About this policy
This privacy policy explains how Blink Web Ltd ("Blink Web", "we", "us" or "our") collects and uses personal data when you visit www.blinkweb.co.uk and its sub-domains (the "Website"), contact us or use our services. Please read it carefully.
It should be read alongside our Website Terms and Conditions. If you are a client, our Services Terms and Conditions and Hosting Terms also apply.
2. Who we are
Blink Web Ltd is a company registered in England and Wales (company number 12959523). Our registered office is Suite RA01, 195-197 Wood Street, London E17 3NU.
For the personal data described in this policy, Blink Web Ltd is the controller. This means we decide why and how your data is used. We are registered with the Information Commissioner's Office (ICO) under registration number ZB178103.
If you have any questions about this policy or how we handle your data, email hello@blinkweb.co.uk or call 03303 410 910.
3. The law we follow
We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended from time to time (together, the "Data Protection Laws").
4. The data we collect
Information you give us
- Enquiries: your name, email address, phone number, company name, the department you choose and the content of your message when you use our contact form, email us, call us or message us on social media.
- Radio hire quotes: your name, email address, contact number, the number of radios, hire dates, delivery address and any additional information you provide.
- Clients: contact and billing details, account login details for our client area, order and service history, support tickets and correspondence, and any information needed to deliver the service you have bought (for example, domain registration details required by Nominet or other registries).
- Recruitment: your CV and contact details if you apply to work with us.
Information collected automatically
- Server logs: when you visit the Website our server records technical information such as your IP address, browser type and version, operating system, the pages you request, the referring page and the date and time. We use this to keep the Website secure and working.
- Analytics: if you accept analytics cookies, Google Analytics collects information about how you use the Website, such as the pages you view, how long you stay, the device you use and your approximate location (town or region level). See section 11 for details.
We do not intentionally collect special category data (such as health information) through the Website. Please do not include it in a form or message unless we have asked for it.
5. How and why we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Replying to enquiries and preparing quotes | Enquiry and radio hire details | Taking steps at your request before entering into a contract, or our legitimate interest in responding to business enquiries |
| Providing and managing the services you buy, including support, billing and account administration | Client data | Performance of a contract |
| Registering and renewing domain names | Client data, registrant details | Performance of a contract and compliance with registry rules |
| Keeping the Website, our systems and our clients secure, and preventing spam and fraud | Server logs, IP address, form data | Legitimate interests |
| Understanding how the Website is used so we can improve it | Analytics data | Consent |
| Keeping accounting and tax records | Billing data | Legal obligation |
| Sending service updates, such as maintenance notices or renewal reminders | Contact details | Performance of a contract or legitimate interests |
| Sending marketing emails about our services | Name and email address | Consent, or for existing clients our legitimate interests (soft opt-in) where PECR allows |
| Dealing with legal claims and complaints | Any relevant data | Legitimate interests or legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights and you can object at any time (see section 9). You can unsubscribe from marketing emails at any time using the link in the email or by contacting us.
We do not sell your personal data and we do not use it for automated decision-making that has legal or similarly significant effects on you.
6. Who we share your data with
We only share your data where it is needed for the purposes above. The organisations we use include:
- Email delivery: Mailgun (Sinch), which sends messages from our website forms using its EU region.
- Website hosting: DigitalOcean, which provides the server the Website runs on.
- Email, files and workflow: Microsoft (Microsoft 365 and Power Automate), which we use for our own email, documents and to process radio hire requests.
- Analytics: Google (Google Analytics), only if you have accepted analytics cookies.
- Billing and payments: our client area and billing software providers and payment processors, which process payments securely. We do not store full card details.
- Service partners: domain registries and registrars, data centre and licensing partners, and security and monitoring vendors, where this is needed to provide your service.
- Professional advisers: our accountants, lawyers and insurers, where necessary.
- Authorities: HMRC, the police, regulators or courts, where we are legally required to share it or need to protect our rights.
All our suppliers must keep your data secure and use it only on our instructions.
If we sell or transfer all or part of our business, your data may be transferred to the new owner so they can continue to provide the services, and may be disclosed in confidence to a prospective buyer. The new owner will only use it for the purposes it was originally collected for.
7. International transfers
Some of our suppliers are based outside the UK or have support teams or sub-processors outside the UK. Where personal data is transferred outside the UK, we make sure it is protected, for example by transferring only to countries the UK has confirmed provide adequate protection (including the EU and, for certified organisations, the United States under the UK Extension to the EU-US Data Privacy Framework) or by using the UK International Data Transfer Agreement or Addendum. Contact us if you would like more information.
8. How long we keep your data
| Data | How long we keep it |
|---|---|
| Enquiries and quotes that do not lead to work | Up to 2 years from our last contact |
| Client records, contracts and invoices | 6 years after the end of our relationship, to meet tax and legal requirements |
| Support tickets and correspondence | For the life of the service and up to 6 years afterwards |
| Server logs | Up to 90 days, unless needed to investigate a security incident |
| Google Analytics data | 14 months |
| Recruitment applications | Up to 12 months after the role is filled |
When data is no longer needed we delete or anonymise it. Deleted data may remain in secure backups for a short time until those backups are overwritten.
9. Your rights
Under the Data Protection Laws you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct data that is inaccurate or incomplete.
- Erasure: ask us to delete your data in certain circumstances.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Portability: ask us to give you the data you provided in a commonly used format, or to send it to another organisation.
- Objection: object to our use of your data where we rely on legitimate interests, and to direct marketing at any time.
- Withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
To use any of these rights, email hello@blinkweb.co.uk. We may need to confirm your identity. We will reply within one month, although we can extend this by up to two further months for complex requests and will tell you if we need to. There is normally no charge.
Please let us know if your details change so that the data we hold stays accurate.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first at hello@blinkweb.co.uk so we can try to put things right. We will acknowledge your complaint within 30 days and keep you updated.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
11. Cookies
Cookies are small text files stored on your device when you visit a website. Similar technologies, such as browser local storage, work in the same way and are covered here too.
The Website uses as few cookies as possible. Analytics cookies are only set if you click Accept on our cookie banner. You can change your choice at any time using the Cookie settings link at the bottom of every page.
| Name | Provider | Type | Purpose | Expires |
|---|---|---|---|---|
bw-consent (local storage) |
Blink Web | Strictly necessary | Remembers whether you accepted or rejected analytics cookies | Until you clear it |
_ga |
Google Analytics | Analytics (consent only) | Distinguishes visitors so we can count them | 2 years |
_ga_M6R4JFCXQX |
Google Analytics | Analytics (consent only) | Keeps track of your visit session | 2 years |
Our client area at clients.blinkweb.co.uk uses its own strictly necessary cookies to keep you logged in and protect your account. Some pages may include content from other sites, such as embedded maps or social media links, which may set their own cookies under those sites' policies.
You can also block or delete cookies in your browser settings. Visit ico.org.uk/for-the-public/online/cookies for guidance. To opt out of Google Analytics on all websites, you can install the Google Analytics opt-out browser add-on.
12. How we keep your data secure
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, multi-factor authentication on our systems, regular updates and security monitoring, and limiting access to staff who need it. We have procedures to deal with any suspected data breach and will notify you and the ICO where we are legally required to.
If you think your data has been misused, lost or accessed without permission, please contact us straight away at hello@blinkweb.co.uk. For general advice on staying safe online, visit Get Safe Online or the National Cyber Security Centre.
13. When we act for our clients
When we host websites or email, or provide IT, security or support services, we may handle personal data that belongs to our clients and their customers. In that case our client is the controller and we act as a processor on their behalf, under the data protection terms in our Services Terms and Conditions. If your data is held in a service we provide to someone else, please contact that organisation about your rights.
14. Other websites
The Website contains links to other websites, including social media. We are not responsible for their content or privacy practices, and this policy does not apply to them. Please read their own privacy policies.
15. Children
The Website and our services are intended for businesses and adults. We do not knowingly collect data from children under 13.
16. Changes to this policy
We may update this policy from time to time, for example to reflect changes in the law or in the services we use. The latest version will always be on this page, with the date it was last updated at the top. Where changes are significant, we will let clients know by email.