★★★★★ ICO registered — ZC131659

Privacy Policy.

How we collect, use, and protect your personal data.

ICORegistered ZC131659
UKGDPR compliant
0Data sold — ever
5★Trustpilot rating

1. Who we are

Iprecious is a UK-based web design service and a trading name of Mad Tech Heads LTD, a company registered in England and Wales (company number 14440918). Our registered office is Office 7622, 182-184 High Street North, East Ham, London, E6 2JA. When we refer to “we”, “us”, or “our”, we mean Mad Tech Heads LTD trading as Iprecious. We are the data controller for your personal information.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZC131659. If you have any questions about this policy, contact our data protection representative at info@iprecious.co.uk.

2. What data we collect

We may collect the following categories of personal data:

  • Identity data: name, business name
  • Contact data: email address, phone number
  • Project data: information about your website requirements, content and materials you provide for your website
  • Technical data: IP address, browser type, device type, operating system, and pages visited (collected via cookies and server logs)
  • Correspondence data: any information you provide when you contact us by email, phone, post or social media

3. How we use your data — purposes and lawful bases

We only use your personal data where we have a lawful basis to do so. Here is how we process each category:

Purpose Data used Lawful basis
To respond to enquiries and provide quotes Identity, Contact, Project Legitimate interest — responding to pre-contractual enquiries
To deliver web design and hosting services Identity, Contact, Project Contractual necessity
To send marketing emails about our services (only if you have consented) Identity, Contact Consent — you can withdraw at any time
To improve our website and services (analytics) Technical data (aggregated/anonymised) Legitimate interest — improving service quality (recognised legitimate interest under Annex 1 UK GDPR)
To comply with legal obligations (e.g. HMRC records) Identity, Contact, Financial Legal obligation

Legitimate interests explained: Our legitimate interests are (a) responding to enquiries from potential clients in a timely manner, and (b) monitoring and improving the performance of our website. We have balanced these against your interests and rights and believe they do not override them.

4. Consent and withdrawal

Where we rely on consent as our lawful basis (for example, marketing emails and non-essential cookies), you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To withdraw consent, email info@iprecious.co.uk or use the unsubscribe link in any marketing email. For cookies, use the cookie consent banner on our website.

5. Data sharing and third parties

We do not sell your personal data. We may share your information with trusted service providers who assist in delivering our services, under written data processing agreements:

  • Email delivery: we use SMTP email services to send and receive messages
  • Web hosting: your data may be stored on UK-based servers managed by our hosting partners
  • Analytics: we use Google Analytics (Google Ireland Ltd), which may transfer anonymised data to Google LLC in the US under the UK International Data Transfer Agreement (IDTA) and the UK Addendum to the EU SCCs

International transfers: Where we transfer personal data outside the UK (e.g. to the US via Google Analytics), we ensure appropriate safeguards are in place, including the UK International Data Transfer Agreement or an adequacy decision. You can request a copy of these safeguards by contacting us.

6. Data retention

We retain your personal data only for as long as necessary for the purpose it was collected. Our specific retention periods are:

  • Enquiry/contact form submissions: 12 months after the last contact, unless a contract is formed
  • Client records (invoices, contracts): 6 years after the end of the engagement (as required by the Limitation Act 1980)
  • Newsletter/marketing subscriptions: until you unsubscribe, plus 30 days to process the request
  • Analytics data (Google Analytics): 26 months
  • Website server logs: 30 days

When data is no longer needed, it is securely deleted or anonymised.

7. Your rights under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

  • Right to be informed — this policy fulfils that right
  • Right of access — request a copy of the data we hold about you (subject access request)
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure — ask us to delete your data in certain circumstances (“right to be forgotten”)
  • Right to restrict processing — ask us to limit how we use your data
  • Right to data portability — request a machine-readable copy of data you provided
  • Right to object — object to processing based on legitimate interests or direct marketing
  • Rights relating to automated decision-making — we do not use automated decision-making or profiling

To exercise any of these rights, contact us at info@iprecious.co.uk. We will respond within one month. Under the DUAA 2025, we may pause this timeframe if we need to verify your identity — we will inform you if this applies.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption on all pages
  • Secure SMTP email transmission
  • Access controls on systems containing personal data
  • Regular software and security updates

We require all third-party service providers to have equivalent security measures in place.

9. Making a complaint

If you are unhappy with how we have handled your personal data, you have the right to make a complaint. Under the Data (Use and Access) Act 2025, we ask that you first raise your concern with us so we can investigate and resolve it.

Please see our Data Protection Complaints Process for full details on how to raise a complaint, what to expect, and how to escalate to the ICO if you remain unsatisfied.

10. Contact

If you have questions about this policy or wish to exercise any of your rights, please contact us:

  • Email: info@iprecious.co.uk
  • Post: Data Protection, Mad Tech Heads LTD, Office 7622, 182-184 High Street North, East Ham, London, E6 2JA
  • ICO registration: ZC131659

Last updated: 3 July 2026. We review this policy annually and whenever our processing changes.