Skip to Content
Britishweb
Data Protection & Privacy Standards

Privacy Policy

Last updated: August 2026 Swiss nLPD (RS 235.1) & EU GDPR Compliant ISO 27001 Swiss Infrastructure

1. Introduction & Data Controller

Britishweb and ticinoWEB ("we", "us", "our") are committed to respecting your privacy and protecting the personal data entrusted to us. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, stored, and safeguarded.

We process all personal data strictly in accordance with the Swiss Federal Act on Data Protection (nLPD / FADP, RS 235.1), the UK Data Protection Act 2018 (UK GDPR), and the European Union General Data Protection Regulation (EU GDPR 2016/679).

Data Controller Contact:
Britishweb / ticinoWEB Data Protection Desk
Email: info@britishweb.co.uk | Phone: +44 7479 8052 39

2. Personal Data We Collect

We collect information when you visit our website, communicate with us, or request services:

  • Direct Inquiries & Contact Form: Name, business email, telephone number, company name, service preference (Web Design, Enterprise ERP, Mobile Apps, AI Agents), estimated project budget, and project requirements.
  • Client Portal & Accounts: Authentication credentials, user identification numbers, contact history, and billing records for authenticated customer sessions.
  • Technical Navigation & Server Logs: IP address, browser type and version, device identifier, operating system, referring URL, time stamp of access, and pages visited.

3. Purpose & Legal Basis of Processing

We process your personal information based on lawful grounds:

  • Performance of a Contract: To deliver bespoke web development, ERP systems, mobile apps, software licensing, and cloud hosting services.
  • Customer Communication: To respond to quotation requests, support inquiries, and project onboarding workflows.
  • Legitimate Interests: To maintain system security, detect and prevent malicious activities, ensure network integrity, and optimize user experience.
  • Legal Compliance: To adhere to statutory accounting, tax, commercial records retention, and regulatory requirements under Swiss and UK law.

4. Swiss Hosting & Data Sovereignty

Our production servers and databases are hosted in ISO 27001-certified, eco-friendly data centers physically located in Switzerland (Infomaniak / Jelastic infrastructure). All data transmission is encrypted using modern TLS/SSL protocols with EV/DV certificates.

We back up all database and media files every 24 hours to physically isolated backup servers in separate Swiss data centers with a 7-day retention cycle.

5. Confidentiality & Third-Party Disclosure

Absolute No-Sale Policy:

We assure you that your data will not, under any circumstances, be sold, rented, transferred, or disclosed to third parties for marketing purposes.

We only share information with vetted technical service providers acting under strict Data Processing Agreements (e.g., Swiss hosting providers, transactional email services such as Amazon SES with EU data storage), or when compelled by a valid legal order from a Swiss court or competent regulatory body.

6. Cookies & Tracking Technologies

Our website uses essential technical cookies required for the secure operation of the site, session persistence, and client portal authentication. We do not engage in invasive cross-site advertising trackers or third-party behavioral profiling.

You can configure your browser to reject cookies or delete existing cookies at any time via your browser settings.

7. Data Retention & Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Swiss and UK commercial accounting and tax retention periods (typically up to 10 years for contractual and billing records).

Contact inquiries that do not lead to a contractual relationship are purged after the inquiry is concluded.

8. Your Legal Rights

Under Swiss data protection law (nLPD) and GDPR, you have the right to:

  • Right of Access: Request confirmation and a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal information.
  • Right to Erasure: Request deletion of your personal data when statutory retention obligations permit.
  • Right to Restrict Processing: Restrict how your data is handled in certain scenarios.
  • Right to Data Portability: Receive your provided data in a structured, commonly used format.
  • Right to Object: Object to processing carried out based on legitimate interests.

To exercise any of these rights, email us at info@britishweb.co.uk.

9. Technical & Organisational Security Measures

We enforce multi-layered defense mechanisms, including SSL/TLS 256-bit encryption, firewall protection, isolated database containers, restricted SSH access with cryptographic keys, and continuous monitoring to safeguard your data from unauthorized access, accidental alteration, disclosure, or loss.

10. Updates & Inquiries

We may update this Privacy Policy from time to time to reflect technical, operational, or legal developments. The current version will always remain accessible on this page with the revision date.

For inquiries or concerns regarding data protection, reach our privacy officer at info@britishweb.co.uk.