← Back to home

Legal

Privacy Policy

Last updated: 14 August 2026

Kindling Web Services is a trading name of Titan Software Ltd, registered in England & Wales (company no. 17343028). We are the data controller for the processing described on this page. It explains what personal data we collect through this website and in running our business, why, how long we keep it, and your rights. Questions or requests: [email protected].

1 What we collect

  1. 1.1 Enquiries — when you use our contact form we collect your name, business name, email address, budget range, your message, and your IP address (used only to prevent spam and abuse of the form).
  2. 1.2 Client records — if you become a client, we hold your contact details, project details, quotes, correspondence, invoices and payment records.
  3. 1.3 E-signing — when you sign a quote or statement of work electronically, we record your name, your signature image, and the IP address and browser details at the moment of signing, as evidence that the document was executed.
  4. 1.4 Emails — we keep copies of the transactional emails we send you (for example quotes and signing links).
  5. 1.5 Cookies — the public site sets no analytics, tracking or advertising cookies. The only cookie is an essential session cookie used by our admin area.

2 Why we use it

  1. 2.1 To respond to your enquiry and discuss your project (our legitimate interest in responding to messages sent to us).
  2. 2.2 To deliver our services to you as a client, including quotes, contracts, invoicing and support (performance of a contract).
  3. 2.3 To keep accounting and tax records (legal obligation).
  4. 2.4 To evidence signed agreements and defend legal claims (our legitimate interests). We do not sell personal data, and we do not send marketing emails.

3 How long we keep it

  1. 3.1 Enquiries that don’t lead to work — deleted automatically 12 months after submission.
  2. 3.2 Client records, contracts and signed documents — kept for 6 years after our work together ends, in line with the limitation period for contract claims in England & Wales.
  3. 3.3 Invoices and payment records — kept for 6 years from the end of the relevant financial year, as required by HMRC.
  4. 3.4 Copies of emails we have sent — deleted automatically after 12 months.
  5. 3.5 Admin sign-in records (IP addresses) — deleted after 1 hour.
  6. 3.6 Backups — encrypted backup copies expire automatically on a rolling schedule: daily copies within 30 days, monthly copies within 13 months.

4 Who we share it with

  1. 4.1 Service providers who process data on our behalf: Cloudflare (hosting, database and backup storage), Resend (transactional email delivery), GitHub (private off-site backup storage) and Google (push notifications to our admin devices).
  2. 4.2 Where these providers process data outside the UK, transfers are protected by UK-approved safeguards (such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement).
  3. 4.3 Professional advisers (accountants, legal, insurers) where necessary. We never sell or trade personal data.

5 Your rights

  1. 5.1 You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to our use of it, and to data portability.
  2. 5.2 To exercise any right, email [email protected] — no special form is needed. We respond within one month, free of charge. We may need to verify your identity first, in which case the one-month period pauses until you respond.

6 Deletion & backups

  1. 6.1 When we delete your data — on request or on schedule — it is removed from live systems promptly. Backup copies are held beyond use (never restored to live systems except for disaster recovery, in which case deletions are re-applied) until they expire on the schedule in section 3.
  2. 6.2 Where the law requires us to keep something — signed contracts and payment records — we keep only what is required, for the periods in section 3, and delete the rest.

7 Complaints

  1. 7.1 If you are unhappy with how we have handled your data, email [email protected] and we will investigate and reply within 30 days.
  2. 7.2 You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

8 Websites we build for clients

  1. 8.1 We build and host websites for client businesses. Personal data submitted on those sites (for example bookings or enquiries) is controlled by the business named on the site — contact them directly about it, or email us and we will pass your request on without delay. Each client site carries its own privacy policy.

We update this page whenever our practices change — the date above reflects the latest revision. Our Terms & Conditions set out how we handle client data in more detail.