This privacy notice explains how SFTPLabs collects and uses personal data when you visit sftplabs.com or contact us. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

For the purposes of UK data protection law, the data controller is:

[Company / sole trader name]
[Trading address]
United Kingdom
Email: info@sftplabs.com

Note: company details to be updated when SFTPLabs Ltd is incorporated.

2. What personal data we collect

We collect the minimum personal data necessary to operate this website and respond to enquiries. Specifically:

• Contact form submissions: name, email address, and any information you choose to include in the subject or message field.
• Email correspondence: if you email us directly, we will hold your email address and the contents of your message.
• Server logs: our hosting provider records standard web server logs including IP address, user agent, request URL, and timestamp. These logs are retained for technical and security purposes.

We do not use marketing analytics, advertising trackers, or third-party social media plugins on this site.

3. Lawful basis for processing

We rely on the following lawful bases under UK GDPR Article 6:

• Legitimate interests (Article 6(1)(f)): to respond to enquiries you have initiated, and to maintain the security and proper operation of our website.
• Consent (Article 6(1)(a)): where you have explicitly opted in to receive product news or updates.
• Legal obligation (Article 6(1)(c)): where we are required to retain records for tax, accounting, or other statutory purposes.

4. How we use your data

We use your personal data only for the purposes for which you provided it:

• To respond to your enquiry
• To send you information you have specifically requested
• To maintain records of business communication for legal and accounting purposes

We do not use your personal data for marketing without your explicit consent, and we do not sell, rent, or otherwise transfer your data to third parties for their own marketing purposes.

5. Who we share your data with

We share personal data only with the following categories of recipient, and only to the extent necessary:

• Web hosting provider (IONOS): processes data on our behalf as part of providing the website infrastructure.
• Email provider: processes email correspondence sent to and from our @sftplabs.com addresses.
• Professional advisors: such as accountants and legal counsel, where there is a legitimate business need.
• Regulatory and law enforcement bodies: where we are legally required to disclose.

We do not transfer personal data outside the United Kingdom or European Economic Area without ensuring appropriate safeguards are in place.

6. Data retention

• Contact form submissions: retained for up to 24 months unless the enquiry leads to ongoing business correspondence.
• Business correspondence: retained for 7 years to comply with UK tax and accounting requirements.
• Server logs: typically retained for 30 to 90 days by our hosting provider.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: correct any inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data (subject to legal retention obligations).
• Right to restrict processing: limit the ways in which we use your data.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: where consent is the lawful basis, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@sftplabs.com. We will respond within one calendar month.

8. Cookies

This website uses a minimal set of cookies:

• Essential cookies: set by WordPress to manage administrator login sessions. These cookies are not set for ordinary visitors.
• No analytics, advertising, or tracking cookies are set.

9. Complaints

If you have a concern about how we are handling your personal data, please contact us first at info@sftplabs.com so that we can address the matter directly.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

10. Changes to this policy

We may update this privacy notice from time to time. Material changes will be reflected by an updated “last updated” date at the top of this page. We encourage you to review this notice periodically.