Privacy Policy

1. Introduction

WesDx Limited ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

We provide two main services: Stratus, our Platform as a Service (PaaS) solution, and Digital Forensics services. This policy applies to all interactions with our website and services.

We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable to individuals in the European Economic Area.

2. Data Controller

WesDx Limited is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us using the details provided in Section 12.

3. Information We Collect

3.1 Information You Provide

When you use our website contact form, we collect the following personal data:

• Your name
• Your email address
• The content of your message

3.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information through cookies and similar technologies, including:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on our website
• Referring website or source

4. Legal Basis for Processing

Under the UK GDPR and EU GDPR, we must have a valid legal basis to process your personal data. We rely on the following legal bases:

5. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries submitted through our contact form
• To provide information about our Stratus and Digital Forensics services
• To analyse website usage and improve our online experience
• To ensure the security and proper functioning of our website
• To comply with legal and regulatory requirements

6. Cookies and Analytics

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us understand how visitors interact with our site and improve your browsing experience.

6.2 Google Analytics

We use Google Analytics to collect anonymised data about website usage. Google Analytics uses cookies to gather information such as how long you spend on our site, which pages you visit, and how you arrived at our website. This information helps us understand user behaviour and improve our services.

Google Analytics data is processed in accordance with Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

6.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling cookies may affect the functionality of our website.

7. Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share your data in limited circumstances:

• With service providers who assist in operating our website (e.g., hosting providers), under strict data processing agreements
• With Google for analytics purposes (as described in Section 6)
• Where required by law, regulation, or legal process

8. International Data Transfers

Some of our service providers, including Google, may process data outside the UK and European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office or the European Commission, to protect your data.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: We retain this data for up to 2 years after your last communication with us, unless a longer retention period is required for legal purposes
• Analytics data: Google Analytics data is retained in accordance with Google's data retention policies

After the retention period, your data will be securely deleted or anonymised.

10. Your Rights

Under the UK GDPR and EU GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within one month.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us:

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

If you are located in the European Economic Area, you may also contact your local data protection authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. We encourage you to review this policy periodically.

For significant changes, we will endeavour to provide prominent notice on our website.