Privacy Policy

1. Introduction

Welcome to DataFetch ("we", "our", or "us"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at datafetch.uk or use our services.

This policy applies to information we collect through our website and through email, phone, or other direct contact with you.

2. Who We Are

DataFetch is a data processing service that provides automated data transformation and integration services for businesses.

Contact Details:

• Email: hello@datafetch.uk
• Website: datafetch.uk
• ICO Registration Number: [YOUR_NUMBER]

We are registered with the UK Information Commissioner's Office (ICO) as a data controller and processor.

3. Information We Collect

3.1 Information You Provide Directly

When you contact us through our website form or email, we collect:

• Name: To address you properly in our communications
• Email Address: To respond to your inquiry
• Company Name: (Optional) To understand your business context
• Message Content: Information about your integration needs and requirements

3.2 Information Collected Automatically

Currently, we do not use cookies or analytics tools. We do not track your browsing behaviour or collect technical information about your device.

If we add analytics in future, we will:

• Update this policy with at least 30 days notice
• Use only privacy-respecting analytics (e.g., Plausible, Fathom)
• Provide opt-out options
• Ensure compliance with UK GDPR and PECR (Privacy and Electronic Communications Regulations)

3.3 Information Collected In Other Ways

We may also collect your personal data if you email us or contact us through any other communication platform such as telephone or messaging services. This will include any information you provide to us as part of your enquiry and any information such as contact details, invoicing details and financial details needed to communicate or contract with you.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to Enquiries: To answer your questions and provide information about our services
• Service Delivery: If you become a customer, to provide our data transformation services
• Business Communications: To send you information about your service, including updates and support
• Legal Obligations: To comply with applicable laws and regulations

We will never: Sell your personal data, use it for marketing without consent, or share it with third parties for their marketing purposes.

5. Legal Bases for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on:

• Consent: When you submit our contact form, you consent to us processing your information to respond to your inquiry
• Contract Performance: If you become a customer, processing is necessary to deliver our services
• Legitimate Interests: We may process data to improve our services and run our business efficiently
• Legal Obligations: Where required by law (e.g., tax records, anti-money laundering)

6. Who We Share Your Data With

We may share your information with the following third parties:

6.1 Service Providers (Data Processors)

• Netlify: Our website hosting provider that processes contact form submissions. They are based in the US but comply with UK GDPR through Standard Contractual Clauses
• Mailgun: Email delivery service for processing notifications and support communications. Located in EU (Ireland), complies with UK GDPR through Standard Contractual Clauses
• Amazon Web Services (AWS): For customer data processing as part of our service delivery (UK/EU regions only)
• Other Third Parties: We may also share your data with third party contractors, professionals such as lawyers or accountants and other businesses that may support us. When we do so, we will ensure that your personal data is protected.

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

6.3 Business Transfers

If DataFetch is acquired or merged with another company, your data may be transferred to the new owner.

7. How Long We Keep Your Data

• Contact Form Submissions: Stored for up to 2 years or until you request deletion
• Customer Data: Retained for the duration of our Service Agreement and Data Processing Agreement
• Financial Records: Kept for 6 years to comply with UK tax law

After these periods, we will securely delete or anonymise your data unless we are legally required to keep it longer.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Ask us to correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Ask us to limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)

To exercise any of these rights, contact us at hello@datafetch.uk. We will respond within 30 days.

You also have the right to request a copy of any of your Personal Data that we hold (where such data is held). Under the Data Protection Legislation, no fee is payable, we are required to reply to you within one month, and we will provide any and all information in response to your request free of charge, provided the request is reasonable. If we require clarification to help us locate the information you are seeking, we may pause the one-month response period until we receive that clarification. We will also carry out a search that is reasonable and proportionate based on the scope and nature of your request. Please contact us for more details.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Secure HTTPS encryption for our website
• Access controls limiting who can view your data
• Regular security updates and monitoring
• Secure deletion procedures when data is no longer needed

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

We primarily process data within the UK and EEA. However, some service providers (e.g., Netlify) may transfer data to the United States.

When we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Adequacy decisions (where the destination country has equivalent data protection)

11. Children's Privacy

Our services are intended for businesses only. We do not knowingly collect information from anyone under the age of 18. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify existing customers by email
• Post a notice on our website

We encourage you to review this policy periodically.

13. Complaints

If you have any concerns about how we collect or use your personal data, we encourage you to contact us in the first instance by email: hello@datafetch.uk so that we can try to resolve the issue. We aim to respond to all complaints within 30 days. Where your concern is complex or requires more time, we will let you know and keep you updated on progress.

If you are not satisfied with our response, or if you would prefer not to speak to us first, you can contact the UK's data protection authority:

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: