Privacy policy

Who we are

Toah Ventures is a UK sole-trader website design and development business, responsible as controller for the personal information described in this notice. Our website address is https://toahventures.co.uk.

Contact us at info@toahventures.co.uk or by post to Toah Ventures, Suite 121, 21 Botanic Ave, Belfast, BT7 1JJ. The same details appear at the end of this policy.

Information and where it comes from

• Website requests: your browser sends technical information to Vercel, which provides the hosting and v0 preview infrastructure. This can include your IP address, browser and device information, requested pages and resources, timestamps and errors, where processed for delivery, troubleshooting and security.
• Preparing an enquiry: the brief builder uses the name, return email, project type and message you enter directly. The browser-only handling is explained below.
• Correspondence and project records: if you contact or engage us, we use the contact details, brief, correspondence, project materials, agreements and invoice records you supply as needed to respond, deliver the agreed work and administer the business.

These details come directly from you or your browser. Please do not put passwords, identity-document numbers, sensitive personal information, payment-card details or confidential client data in the brief or an initial email.

What the enquiry builder does

Entering, editing and reviewing a brief keeps it only in temporary browser memory while you are on the homepage. It is not submitted to our server or stored in a database, cookies or persistent browser storage. Clear or Clear brief, reloading, or leaving the homepage discards this page state.

Copy brief writes the reviewed details to your device clipboard only after you click it. If copying is unavailable, you can select the text manually. Clipboard copies can remain until overwritten or cleared by your device; clearing the form does not clear your clipboard or any copies you make.

Open email app is a user-triggered mailto link. It places the reviewed details into your chosen email application, where you must press send yourself. Your chosen application or email provider processes that information under its own terms and privacy notice. Opening the app, reviewing or copying is not delivery to us or confirmation of receipt.

If you send us an email, we use its contents to respond. The website itself has no server-side email-sending service. Required fields help prepare a useful enquiry; there is no legal duty to complete the form. You can use direct email or post instead. Insufficient contact information may prevent a response.

Why we use information and our lawful bases

We use only information reasonably needed for these purposes. We do not run a marketing mailing list through this site, sell personal information or create advertising profiles. This site provides no visitor accounts and makes no automated decisions or profiling with legal or similarly significant effects.

Your right to object

You can object to processing based on legitimate interests for reasons relating to your circumstances. Contact us by email or post. We will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or it is needed for establishing, exercising or defending legal claims.

Cookies, storage and external resources

We do not add advertising or optional analytics cookies or tracking scripts. The brief builder does not use persistent browser storage. Fonts and images are served with this website; we do not embed third-party media.

Vercel or the v0 preview platform may use essential security or access cookies and process technical requests to serve and protect the site. These functions process technical information even when you do not send an enquiry. The surrounding preview platform has its own privacy arrangements. We do not ask you to accept optional tracking that this website does not use.

Who information may be shared with

Vercel receives technical website requests for hosting, delivery and security. When you choose the email-app handoff, your selected email application and provider receive the details you choose to send; they are not appointed by us.

For subsequent correspondence or a project, we share only what is necessary with service providers used for business communications, project delivery or accounting, and with professional advisers or legal authorities where appropriate or required by law. Providers acting on our instructions must have appropriate data-protection arrangements; some recipients, such as advisers or authorities, act independently.

This website has no live Stripe checkout or card processing. We will update this notice before activating any future payment integration or other service that changes how the site uses personal information.

Processing outside the UK

Vercel infrastructure and authorised service providers may process information outside the UK, including in the United States. This is not a UK-only hosting service.

Vercel’s privacy notice explains its own processing and international transfers. Its published Data Processing Addendum (DPA), for applicable Pro and Enterprise arrangements, includes standard contractual clauses and the UK International Data Transfer Addendum. The applicable arrangements depend on the service and contractual terms; a link to the DPA does not itself establish that a separate contract has been entered into.

Where we arrange a restricted international transfer, we require UK adequacy regulations covering the transfer or appropriate contractual safeguards, such as the UK Addendum to standard contractual clauses or the UK International Data Transfer Agreement, as appropriate, together with any necessary additional measures. You can ask us for information about the applicable arrangements and a copy of relevant safeguards, with necessary confidential information removed.

Your choice of email provider is separate: check its privacy notice for its processing locations and transfer arrangements.

How long information is kept

• Unsent briefs: held only in homepage memory until cleared, reloaded or the homepage is left. Device clipboard copies and emails you create follow your device or provider settings instead.
• Enquiries that do not become projects: normally kept for up to 12 months after the last meaningful contact, then reviewed and deleted unless a documented legal issue makes longer retention necessary.
• Project, contract and invoice records: retained for relevant tax, accounting and legal-claim requirements, normally six years after the relevant financial year or contract end, as appropriate. We keep necessary records longer if law requires it or an ongoing dispute needs them, and review that need. Unnecessary working materials are deleted sooner.
• Technical hosting logs: retention follows the provider’s applicable retention controls and what is necessary for delivery, security, troubleshooting and incident resolution. The relevant criteria are the provider’s settings, the type of log and any unresolved security incident.

Your privacy rights

Where applicable, you can ask for access to your personal information, correction, deletion, restriction of processing, or a portable copy. Portability generally applies to information you provide that is processed automatically on consent or contract grounds. The separate right to object is explained above. These rights are conditional; for example, a deletion request does not require us to delete invoices that must be kept by law.

The activities described here do not generally rely on consent. If we use consent for a separate purpose, we will explain it at the time and you can withdraw it as easily as you gave it, including by contacting us. Withdrawal does not affect the lawfulness of earlier processing.

Use the email or postal address below to make a request. We normally respond without a fee within one month, subject to lawful extensions or other rules. If an extension is necessary, we will explain why and tell you within the initial month. We ask for proportionate identity confirmation only where necessary, not routine identity-document uploads.

You can complain to the Information Commissioner’s Office (ICO) about how your information is handled. You do not have to contact us first, although we welcome the opportunity to resolve concerns.

Security and children

We take reasonable steps to limit access to personal information to those who need it and protect business records. Where served over HTTPS, information in transit to the website is encrypted. No website, email or device can be guaranteed completely secure. This site is aimed at people seeking business website services, not children. Please contact us if a child has supplied personal information so we can assess and address it appropriately.

Keeping this notice current

This notice is effective from 29 October 2026. We will keep it current when our actual services or data use change, update the effective date and bring material changes to your attention where appropriate. For project arrangements, read our service terms and cancellations and refunds policy.

Contact

For enquiries, privacy questions, cancellation requests or concerns about a project, email info@toahventures.co.uk or write to the business address below. Include only the details needed to explain your request.