Privacy Policy

The data controller responsible for your personal data is:

ABW System Solutions is a sole trader business. References to "we", "us", or "our" in this policy refer to ABW System Solutions.

We may collect the following categories of personal data:

• Contact information: your name, email address, phone number, and company name — provided when you submit our contact form.
• Enquiry details: information about your project, current CRM system, business challenges, and timeline requirements — provided voluntarily in our contact form.
• Technical data: IP address, browser type, operating system, referring URLs, and pages visited — collected automatically when you visit our website via server logs.
• Cookie data: preferences and session information stored in cookies on your device (see Section 8 for full details).

We do not collect any special category data (such as health information, racial or ethnic origin, or political opinions) and we do not knowingly collect data from children under 16.

We use your personal data for the following purposes and on the following legal bases:

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Service providers: We use GoDaddy (website hosting and email delivery) to operate this website. These providers process data on our behalf under data processing agreements and are bound by appropriate data protection obligations.
• Legal requirements: We may disclose your data where required by law, court order, or regulatory authority.
• Business transfers: In the unlikely event of a business sale or transfer, your data may be transferred to the new owner, who will be bound by this policy.

All third-party providers we use are required to keep your information secure and to use it only for the purposes we specify.

Our website is hosted within the United Kingdom and European Economic Area. Where any of our service providers transfer data outside the UK or EEA, we ensure appropriate safeguards are in place (such as UK adequacy decisions or Standard Contractual Clauses) in accordance with UK GDPR Chapter V.

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Enquiry data: retained for up to 2 years from the date of your last contact, to allow us to follow up and maintain a record of our correspondence.
• Client project data: retained for up to 6 years after the end of the engagement, in line with UK statutory limitation periods.
• Financial and tax records: retained for 6 years as required by HMRC.
• Website technical logs: retained for up to 90 days.

After the applicable retention period, data is securely deleted or anonymised.

Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

• Right of access (Art. 15): You may request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification (Art. 16): You may ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17): You may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing (Art. 18): You may ask us to pause processing of your data in certain circumstances.
• Right to data portability (Art. 20): Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority — at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Our website uses cookies — small text files stored on your device. We use the following types:

• Strictly necessary cookies: Required for the website to function (e.g. security tokens, session management). These cannot be disabled and do not require consent.
• Analytics cookies: Used to understand how visitors interact with our website (e.g. pages visited, time on site). These are only set with your consent.
• Preference cookies: Remember your cookie consent choice. Retained for 12 months.

You can manage or withdraw your cookie consent at any time using the cookie banner on our website, or by adjusting your browser settings. Note that disabling cookies may affect website functionality.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data transmitted to and from our website.
• Secure email transmission for enquiry notifications.
• Access controls limiting who can access personal data.
• Regular review of our data handling practices.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this policy periodically.

For significant changes, we will take reasonable steps to notify you (for example, by email if we hold your contact details).

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

We aim to respond to all data protection enquiries within one calendar month.