Privacy Policy
The short version: we collect what we need to reply to you, we don't sell it, and you can have it deleted whenever you like.
Placeholder document. The text below is a reasonable starting structure, not legal advice. Have a qualified lawyer review and adapt it for your jurisdiction before you launch.
Last updated: 5 August 2026
What we collect
When you submit the contact form we store the name, email address, company name, project type, budget range, and message you provide. Alongside that we store the referring page, your browser's user-agent string, and a salted one-way hash of your IP address. The hash lets us spot abuse without keeping the address itself.
If you subscribe to the newsletter, we store the email address you enter and the page you subscribed from. Nothing else.
We do not use advertising cookies, cross-site trackers, or session recording. Your theme preference is stored in your browser's local storage and never leaves your device.
Why we collect it
Contact submissions are used to reply to your inquiry and, if we work together, to administer the project. Newsletter addresses are used only to send the newsletter.
Technical details attached to a submission — referrer, user agent, hashed IP — exist to filter spam and rate-limit abuse. They are not used to profile you.
Legal basis
Where the UK GDPR or EU GDPR applies, we rely on legitimate interests to respond to inquiries and protect the service from abuse, and on your consent for the newsletter. You can withdraw consent at any time using the unsubscribe link in any email.
How long we keep it
Inquiries are retained for 24 months from your last contact with us, then deleted. Where an inquiry becomes a project, records are kept for as long as required for tax and contractual purposes.
Newsletter subscriptions are kept until you unsubscribe. Unsubscribed records are retained only as a suppression entry so we don't email you again by mistake.
Who we share it with
We do not sell your data. It is processed by a small number of service providers acting on our instructions: our hosting provider, our database provider, and our transactional email provider.
Each is bound by a data-processing agreement. Where data is transferred outside your region, it is covered by the provider's standard contractual clauses.
Analytics
We use privacy-friendly, cookieless analytics that record aggregate page views and referrers. No personal data is collected and no consent banner is required.
Your rights
You can ask us for a copy of the data we hold about you, to correct it, to delete it, or to stop processing it. Email us and we will respond within 30 days.
If you are unhappy with how we have handled your data, you may complain to your local supervisory authority.
Contact
Questions about this policy, or any request relating to your data, can go to siteandriseweb@gmail.com.