# Privacy notice

> How Epfop Ltd handles personal data collected through this website.

## Who we are

Epfop Ltd (company number 09701795, registered in England and Wales) is the controller of the personal data described here, which means it is the organisation responsible for it. The registered details are on the [Company facts](https://www.epfop.com/en/company-facts) page.

## What we collect

This website collects very little.

- Contact form: your name, your e-mail address, the category you choose and your message, if you send one. The form sends them to us as an e-mail, which we keep in our mailbox.
- Project enquiries: if you choose the category Software project, the description of the task you send. Please do not include confidential details, passwords or other people's personal data in a first message; if a project needs them, we agree how to exchange them safely first.
- Spam protection: when you use the contact form, a spam-protection service checks that the request comes from a person. To limit repeated submissions, your network address is also held in the memory of the server for a short time. It is not saved and is not used for anything else.
- Server logs: our hosting provider records technical data such as network address, date and requested page, for security and reliability.
- Language choice: if you use the language switch, one small cookie remembers your choice. See the [cookie notice](https://www.epfop.com/en/cookies).

We do not use advertising or analytics tools on this website, and we do not build profiles of visitors.

## Why we use it, and on what basis

- To read and answer your message: our legitimate interest in running the business and replying to people who write to us, and, where you ask about working together, steps taken at your request before an agreement.
- To prepare a proposal for a software project you ask about: steps taken at your request before entering into a contract.
- To keep the website secure and free of spam: our legitimate interest in protecting the site and its users.
- To remember your language: this follows your own choice, made through the language switch.

## Who receives it

We use a small number of service providers to run the website. They process data on our behalf: a hosting provider, a spam-protection provider (Cloudflare) and the e-mail provider that delivers contact messages to our mailbox. A current list is available on request through the [contact form](https://www.epfop.com/en/contact).

Some providers process data outside the UK. Where they do, we rely on the safeguards that UK law requires. We do not sell personal data and we do not use it for advertising.

## How long we keep it

Contact messages are kept in our mailbox for as long as needed to answer them, and normally for up to 12 months after the last message. We then delete them, unless we are in a continuing business relationship with you or the law requires us to keep them.

Messages that our filters take for spam are delivered to the same mailbox, filed separately and deleted regularly.

Server logs follow the retention period of our hosting provider.

## Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict or stop using it, and in some cases ask for it in a portable form. To make a request, use the [contact form](https://www.epfop.com/en/contact) and choose Other. We may need to confirm who you are first.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at [ico.org.uk](https://ico.org.uk). We would like the chance to put it right first.

## Changes

We update this notice when what we do changes. Last updated: 5 October 2026.

---

Epfop Ltd · Company number 09701795 · Registered in England and Wales · Registered office: 16 Holbeck, Bracknell, England, RG12 8XE

https://www.epfop.com/en/privacy