Skip to main content
Umbrella IT

Umbrella IT · Legal information

Privacy Policy

Draft privacy information for Umbrella IT website visitors, business enquiries and optional marketing, reflecting the current disabled enquiry service.

Draft 1 — pending owner and professional legal approval. Not final terms or an executed agreement. No effective date has been approved.

Umbrella IT is the commercial brand. UMBRELLA IT LTD is registered in England and Wales, company number 17449453.

Registered office: 24-26, Arcadia Avenue Fin009, London, United Kingdom, N3 2JU.

Scope and current service

This draft concerns the Umbrella IT corporate website and business enquiries. It is not a customer software data-processing agreement. Online demo, proposal, contact and partner submissions are not currently accepted. No enquiry is emailed by this website and no form details are transferred to Fekra IT. You may contact us directly by email or telephone; that communication is separate from the online submission system.

Umbrella IT is the commercial brand. The registered company identified below is the proposed controller for these website and enquiry purposes, subject to approval of this notice and the operational arrangements.

Information used for enquiries

When online handling is authorised, all four journeys request a name, business email, organisation, country and a description of the requirement or introduction. The system records the enquiry type, submission time, privacy-notice version, optional marketing choice and handling status. A privacy acknowledgement confirms that the notice was read; it is not consent for all processing.

Demo and proposal enquiries require products of interest. General contact enquiries allow optional product selection. Those three journeys allow an optional telephone number. Proposals also request organisation size and preferred timeframe, with an optional deployment preference. Partner introductions request partnership type and relevant business capabilities.

A hidden anti-bot field and server-side validation reject unsuitable requests. Do not include passwords, confidential documents or sensitive personal information in free-text fields. Form entries are not saved to browser storage by the enquiry form.

Purposes and proposed lawful bases

Enquiry assessment and response would use contact, organisation and requirement information to understand the request and arrange a relevant conversation. Taking steps at an individual's request before a contract is a proposed basis where that individual would be a contracting party. Legitimate interests in responding to business representatives is a proposed basis in other B2B cases; necessity, balancing and objections require legal review before activation.

Protecting the public enquiry service against abuse is proposed to rely on legitimate interests, subject to a documented assessment. These purposes are separate from optional product-update marketing. The marketing checkbox is unchecked by default; the proposed consent-based marketing workflow, evidence records and withdrawal process require separate approval and are not active.

An enquiry, demonstration or request for a quotation does not itself create a customer contract or give access to licensed software.

Storage, access and abuse prevention

The prepared enquiry service uses private Lovable Cloud storage. Public visitors cannot read stored enquiry records or rate-limit counters. No owner-review interface or delivery provider is currently enabled. Authorised access responsibilities and the operating procedure must be approved before online acceptance.

The rate limiter derives keyed hashes from the hosting-provided IP address and normalised email. Its counters contain a hash, hit count and expiry rather than a raw IP or email. The raw IP is not added to an enquiry record by the handler. The IP counter window is one hour and the email window is 15 minutes; expiry resets counters and expired rows are removed through cleanup. Enquiry-handler logs record an outcome status, not the form content. Hosting logs must be assessed separately.

Recipients and international processing

Lovable Cloud is the connected website backend and prepared storage service. The website loads typefaces from Google Fonts; requests expose ordinary connection information to the font service. Hosting and service-provider contractual identities, locations, subprocessors, access arrangements and any required international-transfer safeguards must be confirmed before this notice is approved. No UK-only storage or specific transfer mechanism is promised.

Fekra IT is the Middle East distributor, but the enquiry service does not forward personal data to it. The precise territory and any future disclosure process require separate approval. No CRM, enquiry email-delivery service, analytics or advertising integration is enabled by the website configuration.

Retention and deletion

Enquiry retention has not yet been approved and online acceptance remains disabled. The proposal is to keep information only while a relevant enquiry is being assessed or followed up, then review deletion or anonymisation when that purpose ends. Any further retention for a resulting agreement, a legal obligation or a dispute needs a documented purpose and an approved schedule; no fixed enquiry period is currently promised.

Counter windows are technical abuse-prevention settings, not an enquiry-retention policy. Security-log retention and any future marketing-consent evidence need separate approved criteria. Submission cleanup, exception handling and an accountable owner must be operational before acceptance is enabled.

Your rights and privacy contact

Contact us using the email or telephone below to ask about personal information or request access, correction, deletion, restriction, portability or an objection, where the relevant right applies. Applicability depends on the processing and lawful basis. Identity may need to be checked proportionately before information is disclosed. Proposed procedures and statutory response requirements require professional review.

Where consent is used, it must be possible to withdraw it without affecting the lawfulness of earlier consent-based processing. Optional marketing withdrawal must not stop a necessary reply to your enquiry. You may raise a concern with us or complain to the Information Commissioner's Office at ico.org.uk.

Cookies, storage and future changes

The Cookie Policy describes current website technologies and the distinction between this website and the editor preview. Optional analytics and advertising are not active. Any future change requires an updated inventory, approved privacy information and permission or another applicable legal exception assessed before use.