Privacy Policy

This policy explains how Invoice Ovaro Ltd, trading as Ovaro Web ("we", "us"), collects and uses personal information when you visit our websites, ask us to build a website for you, become a customer, or when we contact your business.

1. Who we are

Invoice Ovaro Ltd is a company registered in England and Wales (company number 15979982). Our registered office is 20 Wenlock Road, London, N1 7GU. We are the controller of the personal information described in this policy, except where section 9 says we act on a customer's behalf. We are registered with the UK Information Commissioner's Office (ICO registration CSN5477810).

Contact: support@ovaroweb.com

2. Information we collect

• Details you give us: your name, business name, trade, town or area, phone number, email address, and anything you add to your website request (logo, photos, services, wording, social media links).
• Information about your business from public sources: your business name, address, phone number, opening hours, photos, rating and reviews from your public Google Business Profile, and details from your existing website or public business listings.
• Customer and payment information: your billing details and payment status. Card payments are handled by Stripe. We never see or store your full card number.
• Communications: records of calls, WhatsApp messages and emails between you and our team, and notes our team makes about them.
• Website usage: only if you accept analytics or advertising cookies, we collect information about how you use our websites and which advert brought you to us, and Google Ads can record when someone who clicked one of our adverts sends us an enquiry. With analytics accepted, Google Analytics records the pages you visit, the campaign that brought you and how far you got with the preview form, but never what you type into it. Until you accept, our Google tag does not load (see our Cookie Policy).
• Preview activity: whether and when a website preview we have made for you is opened.

3. How we use your information and our lawful basis

• To build your website preview, send it to you and talk to you about it: to take steps at your request before entering into a contract, or our legitimate interests in offering our service.
• To provide, host and maintain your website, handle change requests and take payment: performance of our contract with you.
• To contact businesses that may benefit from a website, using business contact details that are publicly available: our legitimate interests in promoting our service to businesses. We check telephone numbers against the Telephone Preference Service and Corporate Telephone Preference Service where the law requires, and we stop immediately if you ask us to.
• To send you information you have asked for, such as our starter pack: your consent or our legitimate interests.
• To measure and improve our adverts and websites: your consent (for cookies) and our legitimate interests.
• To keep accounts and records, prevent fraud and meet legal obligations: legal obligation and legitimate interests.

You can object to any use based on legitimate interests, including all marketing, at any time (see section 7).

4. Who we share it with

We share personal information only with service providers who help us run our business, under contracts that require them to protect it:

• website and database hosting providers
• Stripe (payments)
• our email delivery provider
• Google (business listing look-ups, and analytics and advertising, if you accept those cookies)
• OpenAI (ChatGPT ads measurement, only if you turn that choice on: an advert reference, browser reference, page address and that an enquiry was made — not your name, phone or email from the form)
• telephone and messaging providers, including WhatsApp when you choose to talk to us there
• professional advisers

We may also share information if the law requires it. We do not sell personal information.

5. International transfers

Some of our providers store or process information outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, or equivalent safeguards.

6. How long we keep it

• Enquiries and businesses we have contacted who do not become customers: up to 12 months after our last contact, unless you ask us to delete it sooner. If you ask us not to contact you again, we keep the minimum needed to make sure we don't.
• Customers: for as long as you are a customer and then 6 years after the end of the year your account closes, to meet tax and accounting rules.
• Unused website previews: deleted within 12 months.

7. Your rights

You have the right to access your information, have it corrected or deleted, restrict or object to our use of it, ask for a copy to be transferred, and withdraw consent at any time. To use any of these rights, email support@ovaroweb.com. We will reply within one month.

If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). If you live in the EU, you can complain to your local data protection authority.

8. Security

We use access controls, encryption in transit and reputable providers to protect your information. Only people who need it for their job can see it.

9. When we act for our customers

When visitors to a website we host for a customer send an enquiry or quote request, that information belongs to our customer. We process it on their behalf, only to deliver it to them and run their website. Questions about those enquiries should go to the business concerned.

10. Children

Our services are for businesses and are not aimed at anyone under 18.

11. Changes

We may update this policy. The date at the top shows when it last changed. Significant changes will be shown on our website.