API Integrations (trading as api-integrations.co.uk, “we”, “us”) is the data controller for the personal data described in this policy. This policy explains what we collect, why, and the choices you have. It covers this website and the client area at /accounts/.

Unit 2 Hillhurst Farm, Saltwood, Hythe, Kent, CT21 4HU, United Kingdom · hello@api-integrations.co.uk · 01303 883111

What we collect, and why

Enquiries

When you submit the contact or quote-request form we collect your name, email address, phone number, company name and the project details you provide. We use this to respond to your enquiry and, if it goes ahead, to prepare a quote. This is necessary to take the steps you ask for before entering into a contract.

Client accounts

Creating an account in the client area collects your full name, email, phone number and billing address. We use this to run your project, issue invoices, and correspond with you about the work. This is necessary to perform our contract with you.

Payments

Card payments are handled entirely by Stripe, our payment processor. Your card details are entered on Stripe’s own checkout page and never reach our servers. We retain the invoice, amount and payment status of each transaction as our own financial record.

Support tickets and live chat

Messages you send through a support ticket or the live chat widget are stored so we can respond and so there is a record of what was agreed. If you message us while signed out, we identify your conversation using a cookie rather than any personal data (see our cookie policy).

Platform credentials you choose to share with us

Some integration work requires access to a platform you use — for example a Shopify Admin API token or a WooCommerce login. If we ask for this through the client area, the values you submit are encrypted before being stored, are visible only to the staff working on your project, and every time a staff member views them it is logged. You can ask us to clear a stored credential once it is no longer needed, and we do this as a matter of course once a project is delivered.

Quote acceptance and e-signature

When you accept a quote we record the name you typed, the time, and the IP address the acceptance was made from. This is our evidence that the quote was agreed, and is kept for as long as the resulting contract or project record is kept.

Website usage and cookies

We use a small number of strictly necessary cookies to run the site and, only with your agreement, an analytics cookie to understand which pages bring people to the site. Full details, including exactly what is set and how to change your choice, are in our cookie policy.

Who we share data with

We do not sell personal data, and we do not run advertising or retargeting on this site. We share data only with the processors needed to run the service:

  • Stripe — card payment processing. Stripe is PCI-DSS compliant; see Stripe’s privacy policy.
  • Our email provider — sending transactional email such as invoices, password resets and project notifications.
  • Our hosting provider — the infrastructure the site and client area run on, in the United Kingdom.

We may also disclose data where required by law, for example to comply with a court order or to establish, exercise or defend legal claims.

How long we keep data

We keep enquiry data for as long as is reasonable to follow it up, and no longer than 24 months if it does not become a client relationship. Client account, project and invoice records are kept for the lifetime of the relationship and for six years afterwards, in line with UK tax and accounting record-keeping requirements. Platform credentials are cleared once no longer needed for the work they were provided for, and in any case no later than project completion unless you ask us to retain ongoing access for support.

Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have data erased where there is no legal reason for us to keep it; restrict or object to certain processing; and receive your data in a portable format. Where we rely on your consent (for example, analytics cookies) you can withdraw it at any time.

To exercise any of these rights, contact us at hello@api-integrations.co.uk. If you are not satisfied with our response, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

International transfers

Our hosting and primary systems are in the United Kingdom. Some processors we use (including Stripe) may process data outside the UK; where they do, they maintain safeguards such as Standard Contractual Clauses required under UK data protection law.

Children

This site and client area are intended for business use and are not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The date below shows when it was last revised.

Last updated: 15 September 2026.