
Last updated: 29 September 2026
This policy explains what personal information Web Club Studio collects when you use this website or work with us, why we collect it, how long we keep it and what your rights are. We’ve tried to keep it short and in plain English.
Who we are
Web Club Studio is a trading name of Medisoma Ltd, a company registered in England and Wales (company number 13332396). Medisoma Ltd is the data controller for the personal information described in this policy.
If you have any questions about this policy or your data, email [email protected] or call +44 (0)7932 323209.
What information we collect
When you use the contact form
- Your name and email address
- The services you’re interested in and your budget
- Anything you write in the project details box
- Your IP address, browser details and the date and time you sent the form. We keep these to help us spot spam and misuse.
When you email or call us
We keep the messages you send us and any details you share, such as your phone number, business name and information about your project.
When you become a client
To deliver our services we may hold your name, business name, billing address, email and phone number, invoices and payment records, and any content or access details you share with us so we can build, host or maintain your website.
When you leave a comment on a blog post
We collect the name, email address and website you enter, your comment, your IP address and your browser details. Your email address is never shown publicly.
When you visit the website
Like every web server, ours keeps technical logs of requests, including IP address, browser type, the pages requested and the time. We use these only to keep the website secure and working.
How we use your information and our lawful basis
Under UK data protection law we need a lawful basis for each use of your data. These are ours:
- Replying to your enquiry and preparing a quote. Legitimate interests, and taking steps at your request before entering into a contract.
- Providing our services to you as a client. Performance of a contract.
- Keeping invoices and accounting records. Legal obligation.
- Protecting the website from spam, attacks and misuse. Legitimate interests.
- Publishing and moderating blog comments. Legitimate interests.
We don’t sell your data, we don’t use it for advertising, and we don’t make automated decisions about you.
We will only send you marketing emails if you have asked us to, and you can unsubscribe at any time.
Cookies
This website does not use analytics, tracking or advertising cookies.
WordPress may set a small number of functional cookies. If you leave a comment and tick the box to save your details, a cookie remembers your name, email and website for one year so you don’t have to type them again. Logged-in site administrators also receive login cookies. These cookies are needed for the features you use, so we don’t ask for consent for them.
Third-party services used on this website
Some parts of the website load content from other providers. When this happens, your browser connects directly to them and they receive your IP address.
- Google Fonts (Google LLC) supplies the fonts used on the site. Google’s privacy policy
- OpenStreetMap (OpenStreetMap Foundation) supplies the map on our contact page. OpenStreetMap’s privacy policy
- Gravatar (Automattic Inc.) may show profile pictures next to blog comments. A scrambled version of the commenter’s email address is sent to Gravatar to check for a picture. Automattic’s privacy policy
Who we share your information with
We only share personal information when we need to, and only with:
- our hosting provider, Leaseweb, which supplies the dedicated server this website and our client websites run on (the server itself is managed by us)
- our email provider, so we can send and receive messages
- our accountant and other professional advisers, where needed
- payment providers, if you pay us online
- the police, HMRC or other authorities, if the law requires it
These providers only process your data on our instructions or under their own legal obligations.
International transfers
Google and Automattic are based in the United States, so information such as your IP address may be processed there. Transfers to them are covered by the UK–US data bridge or other safeguards approved under UK data protection law. Where our other providers store data outside the UK, we make sure similar protections are in place.
How long we keep your information
- Enquiries that don’t lead to a project: up to 2 years, then deleted.
- Client records, contracts and invoices: 6 years after the end of the financial year they relate to, as required by HMRC.
- Blog comments: for as long as the comment is published, or until you ask us to remove it.
- Server logs: a short period, after which they are deleted automatically.
How we protect your information
The website runs over an encrypted HTTPS connection on a server we manage and monitor ourselves. Access to personal data is limited to the people who need it, and we keep software and security settings up to date.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to limit how we use your information
- object to us using your information on the basis of legitimate interests
- ask us to transfer your information to another organisation
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email [email protected]. There is no charge, and we will reply within one month.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
Children
This website and our services are intended for businesses. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
