About this Privacy Policy
This Privacy Policy explains what personal data Pelotita Ltd ("Pelotita", "we", "our") collects through this website (pelotita.co.uk), how we use it, who we share it with, and the rights you have under UK data protection law.
Pelotita Ltd is the data controller responsible for personal data collected through this website. Pelotita Ltd is registered with the Information Commissioner's Office (ICO) as a data controller (registration number CSN9867974).
Who we are
| Company | Pelotita Ltd |
|---|---|
| Company number | 09945130 |
| Registered office | 20-22 Wenlock Road, London, N1 7GU, United Kingdom |
| ICO registration | CSN9867974 |
| Data protection contact | info@pelotita.co.uk |
What data we collect
Contact form submissions
When you submit the contact form on this website, we collect:
- Your name
- Your work email address
- Your company name
- The nature of your enquiry (selected from a list)
- Any additional context you choose to provide
Analytics data
If you consent to analytics cookies (via the cookie banner shown on your first visit), we collect anonymised information about your visit using Google Analytics 4, including: pages viewed, time spent on the site, approximate geographic region (country/city level), device type and browser, and how you arrived at the site (referrer). Your IP address is anonymised before storage. If you decline analytics cookies, none of this data is collected.
Server logs
Our hosting provider (Microsoft Azure) maintains standard server logs for security, capacity, and abuse prevention purposes. These logs contain IP addresses and request information for a limited retention period.
Why we collect it (lawful basis)
We process contact form data on the basis of legitimate interest (UK GDPR Article 6(1)(f)) — specifically, our legitimate interest in responding to business enquiries from prospective clients. You have the right to object to this processing at any time.
We process analytics data on the basis of consent (UK GDPR Article 6(1)(a)) — which you provide or decline via the cookie banner. You can withdraw consent at any time by clicking "Cookie settings" in the footer.
Who processes your data
The following third-party service providers process data on our behalf as data processors:
| Processor | Purpose | Location |
|---|---|---|
| Formspree | Contact form transmission | United States |
| Namecheap Private Email | Email storage and delivery | European Union |
| Microsoft Azure | Website hosting (Static Web Apps, West Europe region) | European Union / United Kingdom |
| Google (Analytics, Fonts) | Site analytics and web font delivery | European Union / United States |
Transfers to the United States (Formspree, Google) are protected by the EU-US Data Privacy Framework and the UK extension to it, plus the providers' own Standard Contractual Clauses.
How long we keep your data
Contact form submissions: retained for 24 months from the date of last contact, after which they are deleted from our records. If you become a client, your records are retained for the duration of the engagement plus 7 years (to meet professional and tax record-keeping obligations).
Analytics data: retained for 14 months in Google Analytics, then automatically deleted.
Server logs: retained for the duration set by the hosting provider (typically 30-90 days).
Who we share data with
We do not sell your personal data. We do not share it with third parties for marketing purposes. We do not provide your data to advertising networks.
We may share your data only with:
- The data processors listed above, for the specific purposes listed
- Legal or regulatory authorities, if required by law (for example, in response to a court order)
- Professional advisers (lawyers, accountants), if relevant to a specific engagement and only with appropriate confidentiality
Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: ask for a copy of the personal data we hold about you
- Right of rectification: ask us to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): ask us to delete your data, subject to certain exceptions
- Right to restrict processing: ask us to stop processing your data in certain circumstances
- Right to data portability: ask us to provide your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest (such as our contact form data)
- Right to withdraw consent: withdraw consent at any time for processing based on consent (such as analytics)
To exercise any of these rights, email info@pelotita.co.uk. We respond within one month of receiving a valid request.
Your right to complain
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Cookies and similar technologies
This website uses cookies as described in our Cookie Policy.
Changes to this Privacy Policy
We review this Privacy Policy regularly and may update it from time to time. The most recent version is always available at pelotita.co.uk/privacy.html. Significant changes will be flagged on the homepage.