Privacy Policy

Last Updated: August 26, 2026

1. Introduction

PAY4WORK LIMITED ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website, enquire about our services, or engage us as a client of our IT solutions.

PAY4WORK LIMITED is the Data Controller for the personal data described in this policy. Our registered address is The Twenty One Building, 21 Pinner Rd, Harrow, United Kingdom, HA1 4ES (Company Registration No.: 15076646).

2. Definitions and Key Roles

Data Controller: The party that determines the purpose and means of processing personal data. For your relationship with us, that is PAY4WORK LIMITED.

Data Processor: A party that processes data on behalf of a Data Controller. Our hosting, email, analytics and payment suppliers act as our Processors.

Client Data: Personal data belonging to your own customers or users that we may access while delivering a project. Where we handle such data, you remain the Controller and we act as your Processor.

3. Information We Collect
3.1. Personal Information

Contact details (name, email address, phone number)
Business information (company name, address, Company Registration No.)
Billing and order information (billing address, order reference, invoice history)
Communication records (emails, chat transcripts, support tickets)

3.2. Payment Information

Payments are processed by our third-party payment providers. Card numbers and similar payment credentials are submitted directly to the payment provider and are not stored on our systems. We receive only the information needed to reconcile your order, such as the amount, currency, payment method type, transaction reference and payment outcome.

3.3. Technical Information

IP address, browser type, device information
Website usage data, pages visited
Cookies and similar tracking data

3.4. Project Information

Website content, design specifications, project briefs
Credentials for platform access you choose to share with us
Feedback and review materials

4. Legal Bases for Processing

We process your personal data on the following legal grounds:

Contractual Necessity: To provide our services, deliver projects and process your orders
Legitimate Interests: For business operations, security and service improvement
Legal Compliance: To meet regulatory, tax and accounting requirements
Consent: For marketing communications and non-essential cookies

5. How We Use Your Information
5.1. Service Delivery

Managing client relationships and delivering projects
Providing customer support and project updates
Processing orders, payments, invoices and refunds

5.2. Business Operations

Improving our services and client experience
Conducting analytics and business intelligence
Ensuring security and preventing fraud
Complying with legal obligations

5.3. Marketing

Sending promotional material where you have consented
Personalising marketing communications
Conducting market research

You can withdraw marketing consent at any time using the unsubscribe link in our emails or by contacting us.

6. Information Sharing and Disclosure

We do not sell your personal data. We share it only in the circumstances below.

6.1. With Service Providers

Payment providers, to process payments and refunds
Hosting and cloud storage providers
Communication and project management tools
Analytics and marketing platforms
Professional advisers such as accountants and auditors

These providers may access personal data only to perform tasks on our behalf and are contractually required to protect it.

6.2. Contractors and Subcontractors

We may share project information with employees, contractors or subcontractors engaged to deliver your project. They are bound by confidentiality and data protection obligations, and we remain responsible to you for their handling of the data.

6.3. Legal Requirements and Business Transfers

To comply with applicable laws and regulations
To respond to lawful requests from government or law enforcement authorities
To protect our rights, property or safety, or those of others
In connection with a merger, acquisition or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy

7. Data Security Measures

We implement appropriate technical and organisational measures, including:

Technical Safeguards: TLS/SSL encryption in transit, secure servers, firewalls
Organisational Controls: Access restrictions on a need-to-know basis, staff training, confidentiality obligations
Physical Security: Secure document and device storage
Regular Monitoring: Security reviews and logging

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

Essential Operations: Website functionality, session management and security
Performance Monitoring: Understanding how the site is used
Personalisation: Remembering your preferences
Marketing: Measuring campaign performance, where you have consented

You can manage or block cookies through your browser settings. Blocking essential cookies may prevent parts of the site, including checkout, from working correctly.

9. Data Retention

We retain personal data only as long as necessary for:

Active Client Relationships: Duration of the engagement plus 3 years
Financial and Order Records: 7 years, for tax and accounting compliance
Marketing Data: Until you withdraw consent
Enquiries That Do Not Become Projects: Up to 12 months
Legal Requirements: As mandated by applicable law

When data is no longer needed, we delete it or irreversibly anonymise it.

10. Your Data Protection Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Have inaccurate information corrected
Deletion: Request erasure of your personal data
Restriction and Objection: Ask us to restrict processing, or object to processing based on legitimate interests
Portability: Receive your data in a structured, commonly used, machine-readable format
Consent Withdrawal: Withdraw consent for marketing or non-essential cookies at any time
Complaint: Lodge a complaint with your local supervisory authority

To exercise these rights, contact us at [email protected]. We will respond within the period required by applicable law, normally within 30 days. Some rights are subject to exemptions, for example where we must keep records to meet a legal obligation.

11. International Data Transfers

We operate internationally, and your personal data may be transferred to and processed in countries other than your own, including the United Kingdom, India, the United Arab Emirates and the United States, where we or our service providers operate. Where data is transferred outside your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses or an applicable adequacy decision.

12. Children's Privacy

Our services are directed to businesses and are not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this policy periodically. The "Last Updated" date at the top of this page shows when it was last revised. Significant changes will be communicated through:

Email notifications
Notices on our website

14. Contact Information

For any privacy questions, or to exercise your rights, contact us at:

PAY4WORK LIMITED
The Twenty One Building
21 Pinner Rd
Harrow, United Kingdom HA1 4ES
Company Registration No.: 15076646
Email: [email protected]