Privacy Policy
Last updated 17 October 2026
This policy explains how we collect and use personal data about our customers, prospective customers and visitors to zoib.com and our client area at my.zoib.com. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
The controller of your personal data is Web Designer Limited, trading as Zoib. We are a company registered in England and Wales (company number 15002899), with our registered office at 119a Flat 2 Uxbridge Road, London W7 3ST, United Kingdom.
For any privacy question or request, email info@georgemorina.com or write to us at our registered office.
ICO registration: Web Designer Limited's data protection fee registration with the ICO is being confirmed.
2. The personal data we collect
- Identity and contact details: your name, company name, postal address, email address and phone number.
- Account details: your client area login, security settings and account preferences. Passwords are stored in encrypted (hashed) form.
- Order and billing details: the services you buy, invoices, payment amounts, dates and transaction references. Card and PayPal account details are handled by PayPal. We do not see or store your full card number.
- Service details: domain names, hosting usernames and settings, and information about the websites and lead pages we provide to you.
- Communications: emails, support tickets and other messages you send us, and our replies.
- Technical data: your IP address, browser and device information, login times and security logs, and the cookies described in our Cookie Notice.
We collect this data from you when you contact us, place an order, use the client area or pay, and from PayPal when it confirms a payment. We do not knowingly collect data from anyone under 18.
3. How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Setting up and running your account and services, taking payments, sending invoices and service emails, and providing support | Performance of a contract with you, or steps you ask us to take before entering into one |
| Keeping accounting and tax records | Legal obligation |
| Protecting our systems and customers, preventing fraud and abuse, and keeping security logs | Legitimate interests (keeping our services secure and preventing fraud) |
| Improving our services and dealing with complaints and legal claims | Legitimate interests (running and improving our business) |
| Sending marketing emails about our similar services to existing customers | Legitimate interests, under the PECR "soft opt-in". You can opt out at any time. |
| Sending marketing to anyone else, and setting non-essential cookies | Consent, which you can withdraw at any time |
Every marketing email includes a way to unsubscribe, or you can email us. We do not sell your personal data, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share your data with
We use trusted service providers (processors) who handle data on our behalf, under contracts that require them to keep it secure and use it only on our instructions:
- WHMCS / WebPros: our billing and client area platform, hosted on servers in Düsseldorf, Germany (EU).
- Krystal Hosting Ltd: our hosting provider, with servers in a London data centre and daily offsite backups.
- Cloudflare: DNS, content delivery and security services for our websites.
- Microsoft (Outlook): our email service.
- PayPal: payment processing, including card payments. PayPal also acts as an independent controller for the data it processes for payments, under its own privacy statement.
We may also share data with our professional advisers (such as accountants), with HMRC and other authorities where the law requires it, and with a buyer if our business is ever sold.
5. International transfers
Most of your data is stored in the UK and the EU. The UK recognises the EU as providing adequate protection for personal data. Some providers, such as Cloudflare, Microsoft and PayPal, operate internationally and may process data in other countries, including the United States. Where this happens, we rely on the safeguards the law requires, such as UK adequacy regulations (including the UK–US data bridge for certified companies) or the International Data Transfer Agreement or Addendum to the EU standard contractual clauses. You can ask us for more information about these safeguards.
6. How long we keep your data
- Financial records (invoices, payments and related account details): 6 years from the end of the financial year they relate to, as required for tax and company law purposes.
- Account and service records: while your account is open, and for up to 6 years after our relationship ends, in case of legal claims.
- Support messages: for as long as needed to support you, and up to 6 years after our relationship ends.
- Hosted website data and backups: deleted after your service ends. Backups are kept by the hosting provider for up to 30 days and then deleted, subject to the provider's retention.
- Security logs: for up to 12 months.
- Marketing preferences: until you unsubscribe. After that, we keep a record of your opt-out so we do not contact you again.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to erase your data, where there is no good reason for us to keep it;
- ask us to restrict how we use your data;
- object to our use of your data based on legitimate interests, and object at any time to direct marketing;
- receive your data in a portable format (data portability), where this applies;
- withdraw consent at any time, where we rely on consent.
To make a request, email info@georgemorina.com. There is normally no charge. We will reply within one month, which can be extended in some cases, and we may need to confirm your identity first.
8. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and reputable providers. No system is completely secure, so please keep your passwords safe and tell us straight away if you think your account has been compromised.
9. Lead pages and client websites
This policy does not cover personal data collected through websites we host or build for our clients, or enquiries made through Zoib lead pages. Those websites have their own privacy notices. For enquiries made through a lead page, the business that rents the page receives and uses the enquiry for its own purposes.
10. Complaints
If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will tell our customers by email.