Privacy and Cookie Policies

Farolis LTD builds, hosts and maintains websites for small businesses. We are the data controller for the information described in this policy, which means we decide why and how it is used.

We are based in the United Kingdom and offer our services to customers in the United Kingdom. This policy is written under the UK GDPR and the Data Protection Act 2018.

2.1When you use our contact form

The contact form is the only place on this website where we ask you for personal information. It collects exactly the following, and nothing else:

• —Service (which kind of site you are asking about)
• —Business name (optional)
• —Full name
• —Email address
• —Whether you already have a website
• —Your current website address (if yes)
• —Your message
• —Acceptance of our Terms & Conditions

You choose what to put in the message box, so please do not send us information you would rather we did not hold. We do not ask for a telephone number, a postal address, or payment details anywhere on this site.

2.2Information collected automatically

Like almost every website, ours records limited technical information when a page is requested — your IP address, your browser and device type, the page you asked for and the time you asked for it. This is handled by Cloudflare, the service that delivers this site, and is used to keep the site available and to defend it against automated abuse.

2.3What we do not collect

This site has no user accounts and no logins. It takes no payments. It carries no advertising, no social media tracking pixels, and no third-party marketing tools. We do not buy personal information from anyone, and we do not sell yours to anyone.

We do not currently use any analytics on this website. Nothing here builds a profile of you or follows you between sites. If that changes, we will update this policy and ask for your consent before setting any analytics cookie.

Data protection law requires us to have a lawful basis for using your information. Ours are:

• —To reply to your enquiry and quote for the work. Where you are asking us about a possible project, this is necessary in order to take steps at your request before entering into a contract. Otherwise it is our legitimate interest in responding to people who contact us.
• —To provide and bill for work you go on to engage us for. This is necessary to perform our contract with you.
• —To keep this website available and secure. This is our legitimate interest in running a site that works and is not taken down by automated abuse.
• —To meet our legal and accounting obligations. Where we must keep records, this is necessary for compliance with a legal obligation.

We do not use your enquiry for anything beyond answering it. We will not add you to a mailing list, and we will not contact you about future offers.

We do not sell or rent your information, and we do not share it for anyone else's marketing. It is handled by a small number of suppliers who provide the technology this site runs on. They act on our instructions and may not use your information for their own purposes.

• —Cloudflare — delivers and protects this website. Sees the technical information described above.
• —Amazon Web Services (AWS) — runs the small program that takes your completed contact form and sends it on to us as an email.
• —Our email provider — holds the enquiry once it reaches our inbox. [ASSET REQUIRED] — email provider to be named by the client.

We may also disclose information if the law requires it, or to establish or defend a legal claim.

This website is hosted on servers in the European Union, and enquiries sent through the contact form are processed there.

One thing does involve information leaving the UK and the EU. Our suppliers Cloudflare and Amazon Web Services are United States companies operating global networks, and they may handle technical information from countries outside the UK.

Where information is transferred outside the UK, we rely on our suppliers' standard safeguards for international transfers, such as the International Data Transfer Addendum or equivalent contractual protections. You can ask us for more detail using the contact details in section 11.

• —Enquiries that do not become work: 12 months from your last contact with us, then deleted.
• —Records relating to confirmed work: 10 years from the end of our engagement, so that we can deal with questions, disputes and our own legal and accounting obligations.
• —Technical and security logs: for the short period our suppliers retain them, which is measured in days rather than years.

This site is served over an encrypted connection (HTTPS), so what you type into the contact form is encrypted in transit. Access to the inbox holding enquiries is limited to the people at Farolis who need it and is protected by strong authentication. We keep the number of places your information is stored deliberately small — enquiries live in our email and are not copied into a separate database or customer system.

No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we do take these measures seriously.

Under UK data protection law you have the right to:

• —ask for a copy of the personal information we hold about you;
• —ask us to correct anything that is wrong or incomplete;
• —ask us to delete it, where there is no good reason for us to keep it;
• —ask us to restrict how we use it while a concern is resolved;
• —object to our using it on the basis of our legitimate interests;
• —ask us to transfer it to you or another provider in a machine-readable format, where it was provided by you and is handled by automated means.

To exercise any of these, email [email protected]. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first.

A cookie is a small text file a website asks your browser to store. This section explains which ones this site uses.

When you first arrive we ask what you are willing to allow. You can accept everything, refuse everything that is not essential, or choose category by category — and you can change your answer at any time using Cookie settings at the foot of any page. Nothing optional is loaded until you have said yes.

Farolis sets no cookies of its own. The only cookies you may receive here are strictly necessary ones set by Cloudflare, the service that delivers and protects this site. There are no analytics cookies, no advertising cookies, and nothing that follows you to other websites.

9.1Strictly necessary cookies

These keep the site available and secure. The law allows them to be set without consent, because the site cannot be provided safely without them.

Cloudflare publishes its own description of these at developers.cloudflare.com.

9.2Remembering your choice

Your answer has to be stored somewhere, or we would have to ask again on every page. We keep it in your browser's local storage rather than in a cookie, under names beginning stcm. — one entry recording that you have answered, and one for each category recording what you said.

This stays on your device until you clear it, is never sent to us or to anyone else, and cannot be used to identify you. The entry for strictly necessary cookies is written as soon as the page loads, before you answer, because that category is always on and cannot be refused. You can clear all of it through your browser's site-data controls.

9.3Analytics and advertising cookies

We do not use any. The consent banner already carries an Analytics category so that the choice is yours from the outset, but it currently switches nothing on, because there is nothing to switch on. If we add analytics in future we will name the cookies involved here before any of them are set, and they will only ever load if you have agreed.

9.4Fonts

This site is set in two typefaces, and both are served from this website itself. Loading them places no cookie on your device and sends no request to anyone else, so nobody outside this site learns anything about your visit from them.

9.5How to control cookies

Use Cookie settings at the foot of any page to change what you allow. Beyond that, every major browser lets you see the cookies you have been given, delete them, and block them. The controls are usually under Settings, then Privacy. Blocking the cookies listed above may make parts of the site slower or cause security checks to be repeated, but it will not stop you reading it.

We update this policy when the site changes or the law does. The date at the top of this document tells you when it last changed. If we make a change that materially affects how we use your information, we will say so clearly here rather than quietly amending the text.

For anything about this policy, your information, or your rights, write to us at [email protected], or by post to Farolis LTD, 19 Heysmoor Heights, 14 Greenheys Road, Liverpool, L8 0PY, United Kingdom.

You may also want to read our Terms & Conditions.