Privacy Policy

Introduction

Welcome to our website. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using our website, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Contact form submissions: When you send us a message through our contact form, we collect your name, email address, phone number (if provided), subject, and message content.
• Account registration: If you create an account, we collect your email address, password (stored securely as a hash — we never store your actual password), first and last name, phone number, and display name.

Information Collected Automatically

• Page views and browsing activity: We track which pages you visit, when you visit them, and how you navigate our site. This helps us understand how our website is used and improve it.
• Device and browser information: We collect your browser type and device category (desktop, mobile, tablet) from your User-Agent header.
• Referrer information: We record how you arrived at our site (e.g. from a search engine or another website).
• IP address (hashed): We do not store your raw IP address. Instead, we generate a one-way hash using a daily rotating salt, which allows us to estimate unique visitors without identifying you personally.

Cookies We Use

Our website uses a small number of cookies, all of which are essential for site functionality:

We do not use any third-party tracking cookies, advertising cookies, or social media tracking pixels.

How We Use Your Information

• To respond to your enquiries: We use the information you submit through our contact form to reply to your messages.
• To manage your account: If you register, we use your information to authenticate you and provide account features such as password reset and email verification.
• To improve our website: We use anonymised analytics data to understand traffic patterns, popular pages, and peak usage times so we can improve user experience.
• To maintain security: We log administrative actions for audit and security purposes.

Data Storage and Security

• All data is stored in a secure database with access restricted to authorised personnel.
• Passwords are hashed using bcrypt with individual salts — they cannot be reversed or read by anyone, including us.
• Session data is stored server-side and encrypted.
• IP addresses used in analytics are hashed with a daily-rotating salt, making them non-reversible.
• All cookies are set with httpOnly and sameSite flags for protection against cross-site attacks.

Third-Party Sharing

We do not sell, trade, or share your personal information with any third parties. All analytics are processed entirely on our own servers — we do not use Google Analytics or any external tracking services.

Data Retention

• Analytics data: Page view records are retained for the purpose of generating traffic reports. The hashed visitor identifiers cannot be linked back to you personally.
• Contact messages: Your messages are retained until they are resolved and subsequently deleted by an administrator.
• Account data: Your account information is retained for as long as your account is active. You may request deletion at any time.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate information in your account.
• Delete your account and associated data by contacting us.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details on our Contact page.

Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us so we can remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.