Privacy Policy

Sealtra Web Services - Your Privacy Matters

Last updated: October 1, 2025

🏒 Data Controller

Company: Rose Iron AI LTD

Division: Sealtra Web Services

Registration: United Kingdom

Data Protection Officer: website@sealtra.com

Legal: legal@roseironai.com

Compliance: GDPR, UK Data Protection Act 2018

πŸ”’ Your Privacy is Our Priority

At Sealtra Web Services, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our website development services.

We are committed to protecting your personal data and ensuring transparency in all our data processing activities. As a UK-registered company, we comply with GDPR and UK data protection laws.

πŸ“Š Information We Collect

Personal Information

β€’ Contact Details: Name, email address, phone number, business address

β€’ Business Information: Company name, industry, website requirements

β€’ Project Details: Website specifications, content, design preferences

β€’ Communication Records: Emails, messages, project discussions

Technical Information

β€’ Website Analytics: Traffic data, user behavior, performance metrics

β€’ Server Logs: IP addresses, browser information, access times

β€’ Cookies: Essential cookies for website functionality

β€’ Security Data: Login attempts, security events, system logs

🎯 How We Use Your Information

Service Delivery

To provide website development, design, and maintenance services as agreed in our contract.

Communication

To respond to your inquiries, provide project updates, and maintain ongoing support.

Legal Compliance

To comply with legal obligations, including invoicing, tax requirements, and regulatory compliance.

Security & Quality

To ensure website security, monitor performance, and maintain service quality standards.

βš–οΈ Legal Basis for Processing

Contract Performance: We process your data to fulfill our contractual obligations for website development services.

Legitimate Interest: We may process data for business operations, security, and service improvement.

Legal Obligation: We process data to comply with UK tax, invoicing, and regulatory requirements.

Consent: Where required, we obtain explicit consent for specific data processing activities.

🀝 Data Sharing

We DO NOT sell your personal data to third parties.

We may share your data only in these limited circumstances:

  • Service Providers: Trusted partners who help us deliver our services (hosting, analytics, payment processing)
  • Legal Requirements: When required by law or to protect our rights and interests
  • Business Transfers: In case of merger, acquisition, or sale of business assets
  • Your Consent: When you explicitly authorize us to share your data

πŸ›‘οΈ Data Security

We implement industry-standard security measures to protect your personal data:

πŸ” Encryption

All data is encrypted in transit and at rest using AES-256 encryption.

πŸ”’ Access Control

Strict access controls and multi-factor authentication for all systems.

πŸ›‘οΈ Monitoring

24/7 security monitoring and regular security audits.

πŸ“‹ Training

Regular staff training on data protection and security best practices.

⚑ Your Rights

Under GDPR and UK data protection law, you have the following rights:

πŸ“‹ Access

Request a copy of all personal data we hold about you.

✏️ Rectification

Correct any inaccurate or incomplete personal data.

πŸ—‘οΈ Erasure

Request deletion of your personal data in certain circumstances.

⏸️ Restriction

Limit how we process your personal data.

πŸ“€ Portability

Receive your data in a structured, machine-readable format.

🚫 Objection

Object to processing based on legitimate interests.

⏰ Data Retention

We retain your personal data only for as long as necessary:

  • Project Data: 7 years after project completion (for legal and tax purposes)
  • Marketing Data: Until you unsubscribe or request deletion
  • Website Analytics: 26 months (Google Analytics default)
  • Communication Records: 3 years after last contact
  • Security Logs: 1 year for security monitoring

πŸͺ Cookies

We use only essential cookies necessary for website functionality:

Essential Cookies

These cookies are necessary for the website to function properly and cannot be disabled.

We do not use tracking cookies, advertising cookies, or any non-essential cookies on our website.

🌍 International Transfers

As a UK-registered company, we primarily process data within the UK and EU. If we need to transfer data outside these areas, we ensure adequate protection through:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes and codes of conduct

πŸ“ Changes to This Policy

We may update this privacy policy from time to time. When we do:

  • We will notify you by email of any material changes
  • We will post the updated policy on our website
  • We will update the "Last updated" date at the top of this policy
  • Your continued use of our services constitutes acceptance of the updated policy

πŸ“ž Contact Us About Privacy

Data Protection Officer: website@sealtra.com

Legal: legal@roseironai.com

Response Time: Within 24 hours, 24/7

Company: Rose Iron AI LTD (UK)

Supervisory Authority: Information Commissioner's Office (ICO), UK

For any privacy-related questions, data subject requests, or concerns, please contact us immediately.