Privacy and Cookie Policy

Last updated: 29 October 2026

This Privacy and Cookie Policy governs the collection, processing, and safeguarding of personal data and the use of cookies for users visiting and purchasing from webtaysoft.com, operated by WEBTAY INTERNATIONAL LTD ("WebTay", "we", "us", or "our").

1. Data Controller

Company Name: WEBTAY INTERNATIONAL LTD
Company Number: 17531079 (Incorporated in England and Wales)
Company Director: Ilyas Korcan
Registered Office: Suite 11329 5 Brayford Square, London, United Kingdom, E1 0SG
Email: [email protected]
Telephone (Support Line): +90 535 673 7444
Nature of Business: SIC 62012 (Business and domestic software development)

2. Personal Data We Collect

When you interact with our website and purchase software products or bespoke services, we may collect and process:

  • Identity Data: First name, surname, company name.
  • Contact Data: Email address, telephone number, billing address, country/postcode.
  • Financial & Transaction Data: Invoicing details, order numbers, transaction history, licence activation keys. (Full credit/debit card numbers are never stored on our servers; they are processed securely by authorised financial institutions).
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and access logs.
  • Correspondence Data: Messages, enquiries, and support tickets submitted via contact forms.

3. Legal Basis and Purposes of Processing

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 for the following lawful bases:

  • Performance of a Contract: To process orders, deliver licensed software code, manage client accounts, and issue VAT invoices.
  • Legitimate Interests: To secure our digital infrastructure, prevent fraudulent transactions, and improve software performance.
  • Legal Compliance: To maintain statutory accounting and corporate tax records under UK company law.
  • Consent: For non-essential cookies and analytics tracking where you have opted in.

4. Disclosure of Personal Data

We do not sell or rent personal information. Personal data may only be shared with third parties under strict confidentiality and processing agreements:

  • Banking institutions and payment service providers for the sole purpose of authorising transactions.
  • Cloud hosting, server infrastructure, and database providers adhering to UK/EEA data security standards.
  • Law enforcement, regulatory bodies, or tax authorities when mandated by applicable legislation or court orders.

5. Payment Security

Full card payment details are never processed or retained directly on our servers. All online card payments are encrypted using 256-bit SSL / TLS protocols and authenticated via 3D Secure verification directly through licensed banking gateways in compliance with PCI DSS standards.

6. Cookie Policy

6.1 What Are Cookies?

Cookies are small text files placed on your device by your web browser when visiting websites. They facilitate essential site functionality, user sessions, and preferences.

6.2 Categories of Cookies Used

Cookie Type Purpose Retention Period
Strictly Necessary Essential for core platform operations, user sessions, basket checkout, and anti-CSRF security. Session / Up to 3 days
Functional Cookies Remembers interface preferences, language selections, and basket items stored locally. Up to 1 year
Performance & Analytics Collects aggregated, anonymised metrics on website traffic and page load performance. Up to 2 years

6.3 Managing Cookie Preferences

You can configure or disable cookies via your browser settings. Please note that disabling strictly necessary cookies may impair the functioning of your basket and account portal:

  • Google Chrome: Settings → Privacy and Security → Cookies and other site data
  • Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Apple Safari: Preferences → Privacy → Manage Website Data
  • Microsoft Edge: Settings → Cookies and Site Permissions

7. Data Retention and Security

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying statutory accounting and legal obligations. We implement robust physical, electronic, and managerial controls, including encrypted transport layers, firewall filtering, and restricted administrative privileges.

8. Your Statutory Rights (UK GDPR)

Under the UK General Data Protection Regulation and Data Protection Act 2018, you hold rights regarding your personal data:

  • Right of Access: Request a copy of the personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure: Request deletion of your personal data where statutory retention obligations do not apply.
  • Right to Restrict or Object to Processing: Object to processing based on legitimate interests.
  • Right to Data Portability: Request transmission of your personal data to another controller in a structured format.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.

9. Contact Information

For questions concerning this Privacy and Cookie Policy or to exercise your statutory rights, please contact our data team:

Notice: We may update this policy periodically to reflect evolving regulatory requirements and platform improvements. The prevailing version will always be maintained on this page.