Privacy and Cookies Policy

Last updated: 11/05/2026

1. Introduction

This Privacy Policy explains how Up and Online ("we", "us", "our") collects, uses, discloses and protects personal data when you visit or interact with our website at www.upandonline.co.uk or otherwise contact us in connection with our services.

We are based in the United Kingdom and our contact details are:

Up and Online
4b Church St, Diss, IP22 4DD
Email: info@upandonline.co.uk

Please read this Privacy Policy carefully. By using our website or submitting your information to us, you acknowledge the practices described below.

2. The information we collect

We may collect and process the following categories of personal data.

2.1 Information you provide to us directly

When you complete a contact form, enquiry form, request a quote, subscribe to updates, or otherwise communicate with us, you may provide:

your name;
company name;
job title;
email address;
telephone number;
postal address;
the content of your message or enquiry;
information relating to the services you are interested in;
any other information you choose to include in your correspondence with us.

2.2 Information collected automatically

When you visit our website, we may automatically collect technical and usage information, including:

IP address;
device identifier and device type;
browser type and version;
operating system;
approximate location derived from your IP address;
pages viewed;
time and date of visits;
referring pages and navigation paths;
interaction with forms and website features;
cookie and similar tracking data.

2.3 Information from third parties

We may also receive information about you from trusted third-party service providers and platforms, including analytics and advertising tools, hosting providers, and other service partners that support the operation of our website and business.

3. How we use your information

We use personal data where necessary for the following purposes:

to respond to enquiries and communicate with you;
to prepare proposals, quotations and other pre-contract information;
to provide and manage our services;
to operate, maintain and secure our website;
to monitor website performance and analyse usage;
to improve our services, website content and user experience;
to send administrative messages and service updates;
to send marketing communications where permitted by law and where consent is required, with your consent;
to comply with legal, regulatory and accounting obligations;
to establish, exercise or defend legal claims.

4. Legal bases for processing

Where UK data protection law requires a lawful basis, we rely on one or more of the following:

Consent: for example, where you agree to receive marketing communications or accept non-essential cookies;
Contract: where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you;
Legal obligation: where we must process or retain information to comply with a legal duty;
Legitimate interests: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms, including operating our website, managing enquiries, improving our services, and protecting against fraud or misuse.

5. Cookies and similar technologies

We use cookies and similar technologies on our website. Cookies are small text files placed on your device when you visit a website.

We use the following categories of cookies and similar technologies:

5.1 Strictly necessary cookies

These cookies are required for the operation of the website and cannot be switched off in our systems. They are generally used for functions such as security, page navigation, and core site functionality.

5.2 Analytics cookies

We use analytics tools, including Google Analytics 4 (GA4), to understand how visitors use our website and to improve performance and content. GA4 uses first-party cookies such as _ga to distinguish unique users and sessions, and analytics storage may be disabled when consent is not granted. (support.google.com)

5.3 Tag management

We use Google Tag Manager to manage and deploy website tags. Tags loaded through Google Tag Manager may set cookies or collect information depending on the services that are activated.

5.4 Marketing and advertising cookies

We do not currently run advertising or retargeting cookies on the website unless stated otherwise in our cookie banner or cookie settings. We may introduce advertising tools in future, including remarketing and conversion tracking technologies, in which case we will update this Policy and the cookie banner and, where required, request consent before setting those cookies. (ico.org.uk)

5.5 Cookie consent

Under UK PECR rules, we must tell visitors if we set cookies, explain what the cookies do and why, and obtain consent for non-essential cookies. Consent must be actively and clearly given. Essential cookies are exempt where they are strictly necessary to provide a service requested by the user. (ico.org.uk)

You may withdraw or change your cookie preferences at any time using the cookie banner or your browser settings.

6. Sharing your information

We may share personal data with service providers and professional advisers who help us run our business and website, including providers of:

website hosting and infrastructure;
analytics and measurement;
content management systems;
email and communications tools;
IT and security services;
legal, accounting and professional services.

We may also disclose personal data where required by law, in connection with legal proceedings, or in connection with the sale, transfer or restructuring of our business or assets.

We do not sell personal data.

7. International transfers

Some of our service providers may process data outside the United Kingdom. Where this happens, we take appropriate steps to protect your personal data and to ensure that transfers are carried out in accordance with applicable data protection law.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy legal, accounting, reporting and record-keeping requirements.

The length of time we keep particular categories of data depends on the purpose for which it was collected and the nature of the relationship between us. In general:

enquiry and correspondence records are retained for as long as needed to manage the enquiry and any follow-up;
client and project records are retained for as long as needed to manage the relationship and comply with legal obligations;
marketing preference records are retained until you unsubscribe, opt out or withdraw consent;
analytics data is retained in line with our analytics settings and provider configuration, or for a shorter period where required.

9. Marketing communications

Where permitted by law, we may use your contact details to send business-to-business marketing communications about our services.

Where electronic marketing consent is required, we will only send such communications if you have opted in or otherwise consented. You can opt out at any time by using the unsubscribe link in our emails or by contacting us directly.

10. Your rights

Depending on your circumstances, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your data;
object to or restrict processing;
withdraw consent at any time, where we rely on consent;
request data portability;
lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise any of these rights, please contact us at info@upandonline.co.uk.

11. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. However, no system can be guaranteed to be completely secure.

12. Children

Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal data from children.

13. Third-party websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy notices before providing them with any personal data.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or business operations. The updated version will be posted on this page with a revised "Last updated" date.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Up and Online
4b Church St
Diss IP22 4DD
Email: info@upandonline.co.uk