Privacy policy

IISAW — Innovative Integrated Software And Web — is a United Kingdom software development company. For the purposes of UK data protection law we are the data controller for personal data collected through this website.

If you have any question about this policy or about how we handle your data, email hello@iisaw.com and a person will reply.

We keep this deliberately small. There are only two ways personal data reaches us through this site.

We do not use advertising trackers, behavioural profiling, third-party marketing pixels or cross-site cookies. We do not buy or sell contact data. We do not add enquiries to a mailing list — if you write to us about a project, you will hear back about that project and nothing else.

Under UK GDPR we rely on two lawful bases. For enquiries, we process your data on the basis of legitimate interests and, where you go on to become a client, performance of a contract — you asked us a question and we need your details to answer it. For server logs, we rely on legitimate interests in keeping the site secure and working.

Enquiries that do not lead to work are deleted within 24 months. Records relating to clients are kept for as long as we work together and for six years afterwards, because UK tax and contract law requires it. Server logs are retained for a short operational period and then discarded.

You can ask us to delete an enquiry sooner than that at any time, and we will.

Only the suppliers we need to run the business, and only for that purpose. Each of them is bound by their own data protection obligations and none of them are permitted to use your data for their own ends.

We host in the United Kingdom and the European Economic Area wherever the choice is ours. Where a supplier processes data outside that area, the transfer is covered by the safeguards required under UK data protection law, such as an adequacy decision or standard contractual clauses.

This website does not set advertising or analytics cookies, and there is no consent banner because there is nothing to consent to. If we later introduce analytics, this policy will be updated first and any non-essential cookie will require your active agreement before it is set.

The site is served over encrypted connections only. Enquiry data is transmitted over TLS and stored in systems protected by access controls and multi-factor authentication. Access is limited to the people who need it to reply to you.

No system is perfect, and we would rather say so than claim otherwise. If a breach affecting your rights ever occurred, we would notify the Information Commissioner's Office within 72 hours and tell you directly where the law requires it.

Under UK GDPR you have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format.

Email hello@iisaw.com and we will respond within one month, free of charge. If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk, which is the UK supervisory authority for data protection.

When we build and host software for a client, we may process personal data belonging to that client's customers. In that arrangement the client is the data controller and we act as a data processor under a written agreement covering security, retention, sub-processors and breach notification. This policy covers our own website only.

If this policy changes materially we will update the date at the top of the page. Continued use of the site after a change indicates acceptance of the revised policy.