Last updated: 9 September 2026
1. Who we are
QuickWeb24 is the trading name used for the website and website-building service at quickweb24.com. The legal operator is EvenAi.
For data protection questions, contact hello@evenai.uk.
2. Scope of this policy
This policy explains how we collect and use personal information when you visit quickweb24.com, create an account, buy a website or add-on, use the self-service customer portal, contact support, or use related QuickWeb24 services.
Where QuickWeb24 processes personal data solely on behalf of a customer through that customer’s own website, the customer will usually be the controller and QuickWeb24 will act as a processor. Separate data-processing terms may apply in that situation.
3. Information we collect
Managed hosting records include the selected provider, domain ownership and DNS access status, payment and acknowledgement references, production launch date, included and renewed term dates, renewal notices, transfer requests and suspension/recovery status. We use these to supply the hosting contract and administer renewals.
Identity and contact information, such as your name, business name, email address, telephone number and business address.
Account information, such as login credentials, account identifiers, service selections and account settings.
Order and billing information, including products purchased, transaction references, billing address, invoices and subscription status. We do not need to store full payment-card details when payment is handled by our payment provider.
Website-build information, including your business description, services, prices, contact details, domain information, brand preferences, copy, logos, images, files and other materials you submit.
Project and approval information, including build status, revision requests, approvals, launch instructions and support requests.
Technical and usage information, such as IP address, device/browser information, security logs, cookie preferences, pages viewed and portal activity.
Marketing preferences and communications where you choose to receive updates or offers.
Please do not submit special-category personal data (for example, health, biometric, religious or political information) unless it is genuinely necessary for a specific agreed service and appropriate safeguards have been agreed in advance.
4. How we use personal information and our lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Provide your account, website build, portal and purchased services | Performance of a contract; steps at your request before entering a contract |
| Take payment, manage subscriptions, invoices and renewals | Performance of a contract; legal obligation where accounting/tax records are required |
| Validate your brief, route your order, manage build status, approvals and launch | Performance of a contract; legitimate interests in operating an efficient self-service service |
| Provide support, prevent fraud, secure accounts and investigate misuse | Legitimate interests in security, service integrity and protecting our business and customers; legal obligation where applicable |
| Improve the website, measure performance and understand service use | Consent where required for non-essential analytics technologies; otherwise legitimate interests where legally permitted |
| Send service messages about orders, security, renewals or account changes | Performance of a contract; legitimate interests in service administration |
| Send optional marketing communications | Consent where required, or legitimate interests where electronic marketing rules permit |
| Meet legal, regulatory, tax, accounting or dispute-resolution requirements | Legal obligation; legitimate interests in establishing, exercising or defending legal claims |
5. Automated workflow
QuickWeb24 is designed to be low-contact and self-service. Automated systems may validate whether required information has been supplied, route orders, update project status, trigger standard communications, generate build tasks and enable purchased services. We do not intend to use solely automated decision-making that produces legal or similarly significant effects on individuals.
6. Who we share information with
We may share personal information only where necessary with service providers and recipients such as:
payment and billing providers (for example, Stripe or another provider shown at checkout);
website hosting, cloud infrastructure, domain and deployment providers;
email, authentication, customer-support and communication providers;
analytics, security, monitoring and fraud-prevention providers, subject to cookie/consent requirements where applicable;
automation, AI and content-processing providers used to deliver features you purchase;
professional advisers, accountants, insurers and legal advisers;
regulators, courts, law-enforcement bodies or public authorities where disclosure is required or permitted by law; and
a buyer or successor if our business or relevant assets are sold, reorganised or transferred, subject to appropriate safeguards.
We do not sell personal information to advertisers.
7. International transfers
Some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we will use an appropriate legal mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.
8. How long we keep information
Account and active-customer records: while the account/service is active and normally up to 24 months after closure, unless a longer period is needed for legal claims or compliance.
Contracts, orders, invoices and accounting records: normally up to 6 years after the relevant financial period or transaction, or longer where law requires.
Website-build assets and project records: for the duration of the service and normally up to 90 days after final termination for operational recovery, unless the customer asks us to retain them or law requires longer.
Support communications: normally up to 24 months after the matter is closed.
Security and access logs: normally up to 12 months, unless required longer to investigate an incident.
Marketing records: until you opt out, plus a minimal suppression record where necessary to respect the opt-out.
These are standard retention periods and may be shortened or extended where reasonably necessary and lawful.
9. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to access your information, correct inaccurate information, request deletion, restrict or object to processing, receive certain information in a portable format, and withdraw consent where processing is based on consent. These rights are not absolute and exemptions may apply.
To exercise a right, contact hello@evenai.uk. We may need to verify your identity before acting on a request.
10. Marketing
You can opt out of marketing at any time using the unsubscribe control in the message or by contacting hello@evenai.uk. Service, security, billing and account messages are not marketing and may still be sent where necessary to provide your service.
11. Cookies and similar technologies
We use cookies and similar technologies for essential website functions and, where enabled, analytics, preferences or marketing. Non-essential technologies are controlled through the cookie-consent mechanism where consent is required. See our Cookie Policy for details.
12. Security
We use reasonable technical and organisational measures designed to protect personal information, including access controls, secure transport, account controls and service-provider security measures. No internet service can guarantee absolute security.
13. Complaints
Please contact hello@evenai.uk first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about making a complaint is available at ico.org.uk.
14. Changes to this policy
We may update this policy as our service, suppliers or legal obligations change. The current version will be published on quickweb24.com with its last-updated date.
Hosting data lifecycle
After unpaid hosting is suspended, hosted site data is retained for 60 days to allow recovery or transfer, then becomes eligible for controlled deletion. A transfer or dispute requiring preservation pauses deletion until resolved. Order, accounting, security and legal records are held separately only for their documented purpose and applicable retention requirement; deleting site content does not erase records we must retain. We do not advertise an automated backup or recovery guarantee beyond the arrangements actually configured for the project.
Customer website processing
Where we host personal data on a customer’s instructions, the customer determines the purposes and remains responsible for its own privacy notices. Before processing that data, the applicable data-processing agreement must document instructions, confidentiality, security measures, subprocessors, rights-request and incident assistance, and return/deletion arrangements. Hosting does not transfer domain ownership to QuickWeb24.
Saved website starts store contact details, partial information, scope, pricing, journey activity and acquisition source. Optional automated order-completion emails are sent only when you choose setup reminders, normally around one hour, one day, three days and seven days after activity. They stop after payment, opt-out or the final reminder. There is no human sales follow-up. Starting an order does not grant general marketing email or SMS permission. You can stop reminders from your saved setup; essential payment, preview and service notices are separate.
We record anonymous landing visits and start clicks without advertising pixels or a persistent analytics identifier. Saved orders retain the supplied campaign source for conversion reporting. Visit counts are not deduplicated people. Email open and click statistics are reported only if a configured provider actually supplies them.