Who we are
This notice explains how Sitenet Tech Ltd (“Sitenet”, “we”) handles personal data. We are the data controller for the personal data described here.
Company number: 12750911. Registered office: 406-410 Eastern Avenue, Ilford, England, IG2 6NQ. ICO registration: ZB665751.
You can reach us about anything in this notice with our contact form or at hello@sitenet.tech. We haven’t appointed a data protection officer.
Who this notice covers
It covers personal data about:
- people who visit sitenet.tech;
- people who contact us, through our contact form, by email or by phone;
- people who apply to work with us;
- the staff of clients and suppliers we deal with; and
- people with an account on our content system.
It doesn’t cover the platforms we build and run for clients, such as booking sites and student portals. There we usually act for our client, who decides how the data is used, and the client’s own privacy notice applies. Ask us if you need details.
What we collect, why, and our lawful basis
We only collect what we need for each purpose. Our lawful basis under UK GDPR is shown for each one.
| When | What we collect | Why | Lawful basis |
|---|---|---|---|
| You visit the site | Technical data such as your IP address, browser and the pages you request, processed by our hosting provider. | To deliver pages and protect the site from abuse. | Legitimate interests: running a secure website. |
| You use our contact form | What you enter, the page you came from, your browser’s user agent, and a one-way coded version of your IP address (see below). | To reply, deal with your request and keep a record of it. | Legitimate interests: answering you. Or, if you ask about working with us, steps before a contract. |
| You email or call us | Your name, contact details and what you tell us. | To reply and talk about your project or question. | Legitimate interests, or steps before a contract. |
| You apply to work with us | Your name, contact details, the link to your CV or profile, and what you tell us. | To consider your application and contact you about it. | Legitimate interests: recruiting; steps before a contract. |
| You make a privacy request | What we need to confirm who you are and answer the request. | To deal with your request and keep a record that we did. | Legal obligation. |
| You or your organisation work with us | Business contact details, correspondence, contracts and invoices. | To deliver our work, manage the relationship and keep accounts. | Contract; legal obligation (accounting and tax). |
| You have a content system account | Your name, email address, role, a securely hashed password, sign-in times and a record of the changes you make. | To give you access, keep the system secure and keep an audit trail. | Contract with you or your organisation; legitimate interests: security. |
We don’t use analytics, advertising or tracking tools, and we don’t use your data for marketing. We don’t make decisions about you based only on automated processing that have legal or similarly significant effects.
Our contact form
When you send a message with our contact form, we store what you enter: the topic, your name and email address, your phone number and organisation if you give them, your message and your answers to the topic’s questions. We also store the page on our site you came from, your browser’s description of itself (its user agent), and a one-way coded version of your IP address that we use only to limit how many messages one visitor can send. We never store your IP address itself.
The people on our team who handle enquiries read them in our content system, and we send a copy to our team’s inbox by email through Cloudflare’s email service.
To stop spam, the form uses Cloudflare Turnstile. It loads a script from Cloudflare, our hosting provider, which looks at technical information about your browser and device to tell people from automated programs. It’s the only third-party script on the site, and it runs only on the contact page. If the check stops your message, you can still email us.
Where the data comes from
Mostly from you, when you visit the site or contact us. Technical data comes from your browser through our hosting provider. Business contact details may come from your organisation when it works with us.
Data outside the UK
Cloudflare and Google run their services from data centres in many countries, so some data may be processed outside the UK. When that happens, we rely on safeguards that UK law recognises, set out in their data processing terms, such as the UK International Data Transfer Addendum, or on UK adequacy regulations.
How long we keep it
| Data | How long |
|---|---|
| Enquiries that don’t lead to work together, including contact form messages and job applications | 2 years after our last contact |
| The coded IP address stored with a contact form message | As long as the message itself |
| Records about clients and the work we do for them | As long as our contract runs, then as long as UK accounting and tax rules require (usually 6 years) |
| Content system accounts | While the account is in use |
| Records of privacy requests | As long as we need to show how we dealt with them |
If you’d like us to delete your details sooner, use our contact form or email hello@sitenet.tech.
Your rights
Under UK data protection law you have the right to:
- access: ask for a copy of the personal data we hold about you;
- rectification: ask us to correct data that’s wrong or incomplete;
- erasure: ask us to delete your data;
- restriction: ask us to limit how we use your data;
- objection: object to how we use your data, including where we rely on legitimate interests;
- data portability: ask for data you gave us in a format you can reuse; and
- withdrawing consent at any time, where we rely on it.
To use any of these rights, use our contact form (choose “Privacy or data request”) or email hello@sitenet.tech. It’s usually free. We may ask you to confirm who you are, and we’ll reply within one month, as the law requires. Some rights have exceptions; if one applies, we’ll explain why.
How we protect it
We use encrypted connections, access controls by role, and a record of every change made in our content system. Our security page explains more.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
When the way we handle data changes, we’ll update this notice and the date at the top.
