Privacy Policy

1. Who we are

WappDev (“we”, “us”, “our”) is a UK-based studio specialising in headless commerce with Vendure, plugin development, and custom web applications. We are the data controller responsible for the personal data we collect through this website.

Registered address: F 17, 6 Violet Road, Tower Hamlets, London E3 3QH, United Kingdom.
Email: contact@wappdev.co.uk
Phone: +44 7939 050 557

2. What data we collect

We collect personal data only when you choose to share it with us. Specifically:

Contact form submissions

• Name
• Company (optional)
• Email address
• Project type
• The message you write to us
• Your IP address (used only for rate limiting and abuse prevention)

Server logs

Our hosting provider (Vercel) automatically records standard server logs including IP address, browser type, pages visited, and timestamps. These are kept for a short period to operate the website and detect abuse.

What we do not collect

• We do not use any tracking or advertising cookies.
• We do not run analytics or behavioural profiling.
• We do not sell or share your data with marketing partners.

3. How we use your data

We use your personal data to:

• Respond to your enquiry and discuss your project
• Send a follow-up email or arrange a call
• Keep records of business correspondence
• Operate the website securely and prevent abuse

4. Legal basis for processing

Under UK GDPR, our legal basis for processing your data is legitimate interest: responding to a business enquiry you initiated by contacting us. We balance this against your privacy rights and only process the minimum data needed to hold a productive conversation.

5. Who we share your data with

We use a small number of third-party services to operate the website and respond to enquiries. They process data only on our instructions:

• Vercel (hosting and CDN) — Vercel Privacy Policy
• Cloudflare (DNS) — Cloudflare Privacy Policy
• Amazon Web Services (SES)(email delivery for contact form) — AWS Privacy Notice

We do not sell your personal data, and we do not transfer it to any party for marketing purposes.

6. International transfers

Some of our service providers process data outside the United Kingdom (typically in the European Union or the United States). Where this happens, we rely on the providers’ UK GDPR compliance frameworks, including Standard Contractual Clauses and adequacy decisions where applicable.

7. How long we keep your data

• Contact form submissions: retained for up to 24 months after our last interaction, then deleted.
• Server logs: rotated and deleted within 30 days by our hosting provider.
• Active client correspondence: retained for the duration of our engagement plus 6 years to meet legal, tax, and accounting obligations.

8. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (the “right to be forgotten”)
• Restrict or object to our processing
• Request a copy of your data in a portable format
• Withdraw consent at any time (where consent applies)

To exercise any of these rights, email us at contact@wappdev.co.uk. We respond within one calendar month.

9. Complaints

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

ico.org.uk/make-a-complaint

We would appreciate the chance to address your concerns directly first.

10. Security

We protect personal data with industry-standard security measures: encrypted transport (HTTPS), access controls on third-party services, secrets stored in environment variables (never in source code), and regular review of who has access to what.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent change. Material changes will be communicated to active clients directly.

12. Contact us

For any privacy-related question or request, contact us at contact@wappdev.co.uk or by post at the registered address above.