Privacy notice

This site is deliberately quiet. No accounts, no login, no shop, no advertising and no third-party tracking. You can send a quotation enquiry or choose to subscribe to our notes. That makes this notice shorter than most. It explains who we are, what happens when you email us, what the site itself records, how long we keep any of it, and what you can make us do about it.

Who is responsible for your data

The data controller is Fleeta Limited, a company registered in England and Wales, company number 16675897, trading as Suffolk Web.

Registered office: 50 Princes Street, Ipswich, Suffolk, IP1 1RJ. Registered with the Information Commissioner's Office, registration number ZC229278. Email: hello@suffolkweb.co.uk

We have not appointed a Data Protection Officer, and we are not required to. Write to the address above and the people who run the company are the ones who read it.

What this website collects on its own

Reading a page here does not require you to tell us anything, and we do not try to work out who you are.

Pages are served by a web host, and hosting involves server logs. Those logs typically record the IP address a request came from, the time, the page requested and the browser's user agent string. They exist so the site can be kept running and defended against abuse. We do not use them to build a profile of you, and we do not combine them with anything else.

We do not use advertising or analytics cookies or social media tracking pixels. The site counts aggregate page views and referring domains on the server without visitor identifiers and runs no third-party analytics scripts.

Our forms use Cloudflare Turnstile to help prevent automated abuse. This loads Cloudflare's security service, which processes browser and network signals such as your IP address, browser information and the site you are visiting. Cloudflare explains this processing in its Turnstile privacy notice. The form sends a verification token and your IP address to Cloudflare for the security check; it does not send your enquiry message to that service.

This domain carried a Suffolk publication from 1997 until roughly 2006. That work is not ours, we did not write it, and the company behind this site was registered in 2026. Where we have republished any of that material and you are named in it, email us and it comes down. You do not need to give a reason. The heritage page explains what the archive is and why it is here.

When you contact us

Almost every piece of personal data we hold will have arrived because someone got in touch. If you email us or submit the quotation form on the contact page, we receive:

your name, as you give it
your email address, and your phone number if you offer one
the name of your business, if you provide it
your business website and town or city, if you provide them
the service and indicative budget you select in the quotation form
how you heard about us, if you choose to answer that optional question
whatever you choose to tell us about your situation, your systems and what you want fixed

That last one matters. An enquiry about automation often includes detail about how a business actually runs. Send only what is needed to answer your question. If the conversation has to go further than that, we will tell you what we need and why, in writing, before you send anything sensitive.

Quotation form enquiries are saved as encrypted records in private server storage before we attempt to email the business. We also record when the enquiry arrived and whether the email notification was accepted by the mail system or failed. This lets us recover an enquiry if an email does not arrive. These records are accessible only through authorised server access, not through a public page. Stored form enquiries are automatically removed after 12 months; email correspondence is handled under the retention periods below.

We also send an acknowledgement to the email address provided, with an enquiry reference and the next step. Temporary abuse checks limit repeated acknowledgements to the same address. This acknowledgement does not subscribe you to marketing.

We use counts of received enquiries by date, selected service, optional discovery source and email-notification status to understand demand and check that notifications are working. The discovery source is the answer you choose to give us, not automatic attribution: the quotation form does not collect a referring address or set tracking cookies. This private summary contains no names, email addresses, business websites or message text and does not track individual visits.

We may also privately record the current outcome of an enquiry, such as a discussion, quotation, work won or not proceeding. This status is entered by the team, linked to the enquiry reference and deleted with the stored enquiry under the 12-month retention period above. Reports use counts by service, discovery source and outcome, without names, contact details or message text. They help us understand which enquiries become useful work; they do not track your browsing or subscribe you to marketing.

Our lawful basis is legitimate interests — our interest in answering people who ask about our services, and your interest in getting an answer. You wrote to us, and a reply is the point. If you would rather we did not process your enquiry on that basis, say so and we will stop and delete it.

If you become a client, we will also process data to perform our contract with you, and to meet legal obligations around tax and accounting records. Quotation enquiries and newsletter subscriptions are separate. Newsletter emails are only sent after you opt in and confirm your address.

If you choose to subscribe, we hold your email address, subscription status, the page or topic through which you joined, and records of confirmation and unsubscribe requests. We use a confirmation link before activating a subscription. These details let us send the articles you requested and honour your choices.

Newsletter emails rely on your consent. You can withdraw it using the unsubscribe link in an email or by contacting us. Sending a general enquiry does not subscribe you. After you unsubscribe, your address is marked as unsubscribed so it is excluded from future newsletter sends; the subscription record remains available to record that preference. You can ask us to delete your personal information.

Who else can see it

Running a business takes a small number of ordinary service providers: somewhere to host the website, something to send and receive email, accounting software for invoices. They process data on our instructions and are bound by contract to do so. We are not going to print names here that may be out of date by the time you read this. Ask, and we will tell you who they are and where the data is held, including whether any of it sits outside the UK.

We do not sell personal data. We do not share it with advertisers or data brokers. We would hand something to a public authority only where the law actually requires it.

How long we keep it

Enquiries that do not become work: up to 12 months, then deleted. Twelve months because a question asked in March may turn into a job in January, and starting the conversation from nothing helps nobody.
Client records and project correspondence: the life of the work, plus six years after it ends, which is the period we need for tax, accounting and any dispute.
Server logs: kept for a short operational period and rotated out. That period is set by the host rather than by us; ask and we will tell you what it currently is.

If you ask us to delete something sooner, and no legal obligation requires us to keep it, we will.

Your rights

Under UK GDPR you can ask us to:

tell you what we hold about you, and give you a copy
correct anything inaccurate
delete it, where we have no overriding reason to keep it
restrict or object to our processing, including processing based on legitimate interests
port it, in a common machine-readable format, where that right applies
withdraw consent, where consent is what we relied on, without affecting what happened before

Email hello@suffolkweb.co.uk and say what you want. We will respond within one month, and we will not charge you for it. We may ask a question to check we are talking to the right person, but we will not demand documents we do not need.

If we get it wrong

Tell us first if you can. Most problems are quicker to fix directly. But you do not have to. You have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk, by phone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Complaining to them costs you nothing and does not stop you pursuing us separately.

Changes to this notice

If this notice changes, the date at the top changes with it. We will not quietly rewrite it and hope nobody noticed. This version was published on 20 September 2026.

Last updated 21 September 2026.