Compliance

Business details

If you need a copy of any policy stated here in writing for a supplier pack, request it via the Contact page.

What data is collected

• Contact details you submit, name, email, phone, business name.
• Message content you choose to share.
• Basic technical data, IP address and browser details, for security and abuse prevention.

Sensitive information should not be sent through the website forms.

Why data is collected

• To respond to enquiries and provide quotes.
• To deliver contracted services and support.
• To protect the site and systems from misuse.

Marketing emails are not sent unless you explicitly request them.

Lawful basis

• Contract, where you request work or enter an agreement.
• Legitimate interests, where you ask for information or a quote.
• Legal obligation, where records must be kept for tax and accounting.

Data retention

• Enquiry messages are kept for up to 12 months.
• Client records and invoices are kept for up to 6 years for tax and accounting.
• Security logs are kept for a limited period for incident handling.

Cookies

This site uses essential cookies only, for page function and security. Tracking ads are not used.

If a client portal is introduced on this site later, cookies may be used for login sessions. Portal pages would be clearly marked.

Third party services

• Hosting and DNS providers are used to serve the website.
• Email services are used to send and receive business communications.
• Public content delivery networks may be used to load front end libraries used for visual effects.

Where a supplier acts as a data processor, processing is limited to what is required to deliver the service.

Security approach

• HTTPS is used on live pages.
• Access is restricted using least privilege.
• Input validation and output encoding are applied to reduce XSS risk.
• Security headers are used to reduce browser based attacks.
• Regular updates and configuration checks are performed.

No system is immune to compromise. Security work reduces risk and improves resilience.

Service scope

• Web services cover design, build, content placement, and agreed integrations.
• Cyber services cover assessment, guidance, and implementation support.
• AI services cover automation planning and implementation using agreed tools.

Exact deliverables, timelines, and support levels are defined in writing for each project.

Limits and liability

Revela Tech provides professional services and advice. Outcomes depend on third party systems, client actions, and changing threats.

• Services are provided without any guarantee of uninterrupted operation.
• Revela Tech is not responsible for third party outages or platform changes outside agreed scope.
• Liability is limited to the value of the specific service purchased, unless required by law.

Client portal and self editing

If a client portal is provided for a client website, roles are defined in the client agreement.

• Where Revela Tech operates the portal on behalf of a client, Revela Tech acts as a data processor for portal data.
• Where a client controls and hosts the portal themselves, the client acts as data controller for portal user data.

Portal access is protected with authentication, rate limits, and secure session handling.

Your rights

• Access, correction, deletion, and restriction requests.
• Objection to processing where applicable.
• Data portability where applicable.

Submit requests via the Contact page. Proof of identity may be required.

Governing law

These terms are governed by the laws of England and Wales.