Privacy policy

1. Who we are

Affirmable Limited ("we", "us", "our") runs this website, affirmable.co.uk. We're the controller of the personal information described here. We're registered in England and Wales (company number 14461956).

This policy covers this website only. Our products (slideAcross, dataLayers, captchAd, iThank.uk and iBudge) each have their own privacy policy, and work for clients is covered by our agreement with them.

2. What we collect

• When you contact us: your name, email address, subject and message, sent through our contact form.
• To protect the contact form: your IP address and the times you sent messages, used only to limit how many messages can be sent and to stop spam.
• When you search the site: your search words, used only to show you results. We don't store them.
• Server logs: our hosting provider keeps standard technical logs (such as IP address, browser and the pages requested) to run and secure the site.

We don't use analytics or advertising tools on this site, and we don't build profiles of visitors.

3. How we use it, and why

What we do	Legal basis (UK GDPR)
Reply to your message, and follow up on what you asked about	Legitimate interests, or taking steps at your request before a contract
Stop spam and abuse of the contact form	Legitimate interests
Run, maintain and secure the website	Legitimate interests

We never sell your personal information, and we won't add you to a mailing list unless you ask us to.

4. Who we share it with

We use a small number of trusted providers, who handle information only on our instructions:

• Hostinger: hosts this website.
• Amazon Web Services: runs our contact form handler and sends its emails (Amazon SES), from servers in London.
• Google: our email provider, where messages from the contact form are received.

Pages also load fonts and code libraries from Google Fonts, cdnjs and jsDelivr, which receive your IP address in order to send them. Videos on the site load from YouTube (using its privacy-enhanced mode, and only when you press play) and from slideacross.com.

Some of these providers may process data outside the UK. Where they do, they're covered by appropriate safeguards such as the UK's adequacy regulations or standard contractual clauses.

5. How long we keep it

• Contact form messages: for as long as we need them to deal with your enquiry, and no longer than two years after our last contact, unless you become a client.
• Contact form protection records: a few hours.
• Server logs: as set by our hosting provider, typically a few weeks.

6. Cookies

This website doesn't set cookies of its own. If you press play on a YouTube video, YouTube may set cookies under its own privacy policy.

7. Your rights

Under UK data protection law, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct it, or delete it;
• restrict how we use it, or object to our using it;
• send it to you, or another organisation, in a common format.

To make a request, use our contact form or email martin@affirmable.co.uk. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.