Privacy Policy

1.Who we are

Union Web Studio is a trading name of Infivion LLC, a limited liability company registered in the State of Wyoming, United States. In this policy, “we”, “us” and “our” refer to Infivion LLC. “You” refers to any visitor to our website or client who engages our services.

We are the data controller for personal information described in this policy. Where we act on behalf of a client — for example, when maintaining a website that collects enquiries from that client’s own customers — we act as a data processor, and the client remains the controller of that data.

2.Information we collect

2.1 Information you give us

• Enquiry details — your name, business name, email address, phone or WhatsApp number, existing website address, and whatever you tell us about the work you need.
• Project materials — text, photographs, logos, price lists, opening hours and any other content you send us so that we can build your website.
• Billing details — the name and address associated with your payment, and the invoice records we are required to keep.
• Correspondence — messages you send us by email, WhatsApp or through forms on this website, and our replies.

2.2 Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, and the pages you viewed on our site.
• Usage data — approximate location derived from IP address, referring website, and the date and time of your visit.

2.3 Information we do not collect

We do not knowingly collect special categories of personal data — such as health information, biometric data, racial or ethnic origin, political opinions, religious beliefs, or trade union membership. Please do not send us such information. If you do, we will delete it.

3.How we use information

We use personal information only for the following purposes:

• To respond to your enquiry and provide a quote.
• To agree a scope and issue invoices.
• To design, build, deliver and support the website you have ordered.
• To provide ongoing maintenance where you subscribe to a Care Plan.
• To communicate with you about your project, including changes and delivery.
• To keep accounting and tax records as required by law.
• To detect, prevent and investigate fraud or abuse of our services.
• To improve our website and services in aggregate, non-identifying form.

We do not sell personal information. We do not share it with third parties for their own marketing. We do not use it to build advertising profiles.

4.Legal bases for processing

Where the EU or UK General Data Protection Regulation applies to you, we rely on the following legal bases:

5.Payment information

All payments are processed by Stripe, Inc. Stripe is certified as a PCI Service Provider Level 1, the highest level of certification available in the payments industry.

When you pay us, your card details are transmitted directly to Stripe over an encrypted connection. We never see, receive, process or store your full card number, expiry date or security code. What we receive from Stripe is limited to the information needed to run our business: the amount paid, the currency, the date, the last four digits of the card, the card brand, the payment status, and the billing name and country you supplied.

Stripe processes your data as an independent controller under its own privacy policy, available at stripe.com/privacy.

6.Service providers

We use a small number of established providers to run our business. Each has access only to the data needed to perform its function, and each is bound by contract to keep that data confidential and secure.

We may also disclose information where we are legally required to do so — for example in response to a valid court order or lawful request from a government authority — or where necessary to establish, exercise or defend a legal claim.

7.Cookies and analytics

A cookie is a small text file stored on your device by your browser. We use them sparingly:

• Strictly necessary cookies keep the site working — for example remembering that you have dismissed a notice. These cannot be switched off.
• Analytics cookies, if enabled, help us understand which pages are read and where visitors come from, in aggregate. These are optional and set only with your consent.

You can delete or block cookies through your browser settings. Blocking strictly necessary cookies may cause parts of the site to stop working.

Some pages embed a map from Google Maps. When such a page loads, Google receives your IP address and may set its own cookies under its own privacy policy. If you prefer to avoid this, do not load pages containing maps.

8.Client content and materials

To build your website we need the content that goes on it. This may include photographs of your premises, your staff, your products, and text you have written. You are responsible for ensuring you have the right to give us that material — including, where photographs show identifiable people, that those people have consented to their image appearing on your website.

We use client materials solely to produce and maintain the website you have ordered. We do not reuse them for other clients. We may show a finished website in our portfolio; if you prefer that we do not, tell us in writing and we will not.

9.International transfers

We are established in the United States and our providers are located primarily in the United States and the European Union. If you are located outside those regions, your personal information will be transferred to and processed in them.

Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses, or an equivalent approved safeguard, as implemented by the relevant provider.

10.How long we keep data

When a retention period ends we delete the data or irreversibly anonymise it. Backups are overwritten on their normal cycle.

11.Your rights

11.1 If you are in the EU, EEA or United Kingdom

Under the GDPR and UK GDPR you have the right to:

• Ask what personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Ask us to delete your data where we have no continuing lawful reason to keep it.
• Ask us to restrict how we use your data while a concern is resolved.
• Receive your data in a portable, machine-readable format.
• Object to processing carried out on the basis of our legitimate interests.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your national supervisory authority.

11.2 If you are a California resident

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect and for what purpose, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights.

We do not sell or share personal information as those terms are defined under the CCPA, and we have not done so in the preceding twelve months.

11.3 Exercising your rights

Write to support@unionwebstudio.com with the word “Privacy” in the subject line. We respond within 30 days. We may ask you to confirm your identity before acting on a request, to make sure we do not disclose your data to someone else. Exercising these rights is free of charge.

12.Security

We apply security measures appropriate to the size of our business and the sensitivity of the data we hold: encrypted connections (TLS) across our website and our clients’ websites, two-factor authentication on business accounts, access limited to those who need it, and regular backups.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, as required by law.

13.Children

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

14.Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date at the top of the page shows when it was last revised. Where a change materially affects how we use your personal information, we will tell active clients by email before it takes effect.

15.How to contact us