This policy explains what personal data EFE CETIN LTD processes through the efecetin.com website, why, and how. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your data
The controller is EFE CETIN LTD, a company registered in England and Wales (company number 17147031). Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
For anything privacy-related, contact us at efe.cetin423@gmail.com.
Data we collect
When you submit the contact form:
- Your full name and email address
- Your phone number (optional)
- Your company name and estimated budget (optional)
- The service you're interested in and whatever you include in your message
- The language you used and the time of submission
When you visit the site, we keep cookieless statistics that do not identify you: the page viewed, the domain of the site that referred you (for example google.com), country and device type (mobile, tablet, desktop). Country is derived from the connection by Cloudflare; your IP address, browser identifier or anything that could recognise you again is not stored. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, no count is made at all.
To prevent abuse, form submissions keep a one-way, keyed hash of your IP address for no longer than 24 hours; the IP address itself is not stored.
Our infrastructure provider, Cloudflare, briefly processes technical logs such as IP address, browser details and request time for security and operation.
Purposes and lawful basis
- Responding to your enquiry and discussing a potential project: steps taken at your request before entering into a contract (UK GDPR Art. 6(1)(b)) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
- Keeping the site secure and preventing spam and abuse: legitimate interests (Art. 6(1)(f)).
- Understanding, in aggregate, how the site is used so we can improve it: legitimate interests (Art. 6(1)(f)). These statistics do not identify anyone.
- Meeting our legal obligations: legal obligation (Art. 6(1)(c)).
We do not use your data for marketing, we do not sell it, and we do not carry out automated decision-making or profiling. If you leave required form fields empty, we cannot receive your enquiry.
International transfers
Enquiries are stored primarily in data centres in Western Europe. Because Cloudflare and Google operate global infrastructure, data may also be processed outside the UK, for example in the United States. Such transfers rely on UK adequacy regulations (the “UK-US Data Bridge” for the US) and/or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep data
- Enquiries: no longer than 24 months from submission. They are then deleted from our system automatically, and copies in our mailbox are deleted on the same basis. If your enquiry leads to a business relationship, related records are kept for the duration of the contract and any statutory retention periods.
- Abuse-prevention hashes: no longer than 24 hours.
- Aggregated visit statistics: as they contain no personal data, they may be kept without a time limit.
Security
The site is served only over an encrypted connection (HTTPS). Enquiries can be viewed only in a password-protected admin area accessible to the company's authorised administrator. No system is entirely risk-free, but we take reasonable technical and organisational measures to protect your data.
Your rights
Under the UK GDPR you have the right to:
- Access the data we hold about you
- Have inaccurate or incomplete data corrected
- Have your data erased
- Restrict processing
- Object to processing based on legitimate interests
- Data portability
To exercise these rights, please contact us at efe.cetin423@gmail.com. We respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO, ico.org.uk, 0303 123 1113), although we'd appreciate the chance to address your concern first.
Children
This site is aimed at businesses and adults. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
We update this policy when the way we process data changes. The current version is always published on this page with its last-updated date.