Privacy Policy
Last updated: 10 November 2026
This Privacy Policy explains how IL WEB collects, uses and protects personal data when you visit ilweb.co.uk, contact us or book a demo of our delivery management software. We are committed to handling your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
The controller responsible for your personal data is:
- IL WEB EOOD, a company registered in Bulgaria under company number (UIC) 202533401, trading as IL WEB
- Registered office: 41 Nedelcho Bonchev St., floor 3, Sofia 1528, Bulgaria
- UK office: 1F2 108 McDonald Rd, Edinburgh EH7 4NQ, United Kingdom
- Email: info@ilweb.eu
- Phone: +44 7404 500745
If you have any questions about this policy or how we use your personal data, please contact us using the details above.
2. Scope of this policy
This policy covers personal data we collect through this website and in our communications with prospective and existing customers. It does not cover personal data that our customers (for example, courier and delivery companies) enter into our software about their own customers, recipients or drivers. For that data, our customer is the controller and IL WEB acts as a processor under a written agreement with that customer. If your delivery is handled by one of our customers, please refer to their privacy notice.
3. Personal data we collect
- Contact data – your name, company name, job title, email address and phone number when you email or call us.
- Demo booking data – when you book a demo, the booking is made through Google Calendar appointment scheduling. Google collects your name, email address and any details you add to the booking and shares them with us.
- Customer account data – if you are a user of our software, your username, login details and the security tokens used to keep you signed in.
- Technical data – your IP address, browser type, device information, the pages you request and the date and time of the request. This data is recorded automatically in our web server logs.
- Cookie data – see our Cookie Policy.
We do not intentionally collect special category data (for example, health information) through this website.
4. How we use your data and our lawful basis
| Purpose | Data used | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Responding to your enquiries and arranging and delivering demos | Contact data, demo booking data | Legitimate interests (responding to business enquiries), or steps taken at your request before entering into a contract |
| Providing our software and services, managing customer accounts and billing | Contact data, customer account data | Performance of a contract |
| Running, securing and improving the website, preventing fraud and abuse | Technical data, strictly necessary cookies | Legitimate interests (keeping our website secure and working) |
| Keeping accounting and tax records | Contact data, invoicing details | Legal obligation |
| Sending you news about our products by email | Contact data | Consent, or for existing customers, the “soft opt-in” under PECR. You can unsubscribe at any time. |
Where we rely on legitimate interests, we have considered that our interests are not overridden by your rights and freedoms. You can object to this processing at any time (see section 9).
We do not sell your personal data and we do not use it for automated decision-making that has legal or similarly significant effects on you.
5. Who we share your data with
We only share personal data where necessary, with:
- Our hosting provider, which stores the website and its server logs on our behalf.
- Google – for email, demo bookings (Google Calendar) and web fonts (Google Fonts). When a page of this website loads, your browser requests fonts from Google’s servers, which means Google receives your IP address.
- Content delivery networks – some scripts and stylesheets are loaded from public CDNs (jsDelivr, cdnjs by Cloudflare, Google Hosted Libraries and BootstrapCDN). These providers receive your IP address when your browser requests the files. They do not receive any other information from us.
- Professional advisers such as accountants and lawyers, where needed.
- Authorities where we are required to do so by law.
6. International transfers
IL WEB EOOD is established in Bulgaria, in the European Economic Area (EEA). The UK recognises the EEA as providing an adequate level of protection, so transfers of personal data between the UK and the EEA are permitted. Some of our service providers, such as Google, may process data in the United States or other countries. Where this happens, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep your data
- Enquiries and demo bookings that do not lead to a contract: up to 2 years after our last contact with you.
- Customer contract and account data: for the duration of the contract and up to 6 years after it ends, to deal with any legal claims.
- Accounting and tax records: for the period required by law (up to 10 years under Bulgarian accounting law).
- Web server logs: up to 12 months.
- Cookies: see our Cookie Policy.
8. How we protect your data
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, hashed passwords and restricted access to our systems. No method of transmission over the internet is completely secure, but we work to protect your data and to deal promptly with any suspected data breach.
9. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data;
- object to processing based on legitimate interests, and to direct marketing at any time;
- receive your data in a portable format (data portability);
- withdraw your consent at any time, where we rely on consent. This does not affect processing carried out before you withdrew it.
To exercise any of these rights, email info@ilweb.eu. We will respond within one month. There is normally no charge. We may need to ask you for information to confirm your identity.
10. Complaints
If you have a concern about how we handle your personal data, please contact us first and we will try to resolve it. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.
If you are in the EEA, you can also complain to the supervisory authority in your country, or to the Bulgarian Commission for Personal Data Protection (cpdp.bg).
11. Children
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.
12. Links to other websites
This website contains links to other websites, such as Google Maps, Facebook and YouTube. We are not responsible for the privacy practices of those websites. Please read their privacy policies.
13. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date it was last updated.