Privacy Policy

1. Introduction

Fair Play Web ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our contact form or website.

2. Data Controller

Fair Play Web
Based in Snodland, Kent, UK
Email: hello@fairplayweb.co.uk

3. What Data We Collect

When you submit our contact form, we collect:

• Your name
• Business name
• Email address or phone number
• Any message you provide
• Technical data (IP address, browser type, referrer) for security and spam prevention

4. How We Use Your Data

We use your personal data solely to:

• Respond to your inquiry
• Provide information about our services
• Prevent spam and ensure security

We do NOT:

• Share your data with third parties
• Use your data for marketing without consent
• Add you to mailing lists without explicit consent

5. Legal Basis for Processing

Under GDPR, we process your data based on:

• Consent: You have given explicit consent by checking the consent checkbox
• Legitimate Interest: Responding to business inquiries

6. Data Retention

We retain your personal data for 12 months from the date of submission, or until you request deletion, whichever comes first.

After this period, data is securely deleted unless we have a legal obligation to retain it.

7. Your Rights Under GDPR

You have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at hello@fairplayweb.co.uk

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in Transit: All data transmission uses HTTPS/TLS encryption
• Input Sanitization: All inputs are sanitized to prevent XSS and injection attacks
• Secure Serverless Functions: Data processed in secure Vercel serverless environment
• Encrypted Email Transmission: Email delivery uses TLS encryption
• No Client-Side Storage: Data is not stored in browser (no cookies, localStorage)
• Environment Variables: API keys and sensitive data stored securely
• Access Controls: Limited access to data processing systems

Data Storage: Form submissions are sent via encrypted email. We do not maintain a separate database. Your data is stored in our email inbox, which is encrypted at rest by our email provider (Gmail/Outlook/etc.).

9. Third-Party Services

We use the following third-party services that may process your data:

• Vercel: Hosting and serverless functions (GDPR compliant)
• SendGrid/Resend: Email delivery (GDPR compliant, only if configured)

These services are GDPR compliant and process data only as necessary to provide their services.

10. Cookies

Our website does not use cookies for tracking. We only use essential technical cookies required for form functionality and spam prevention.

11. International Data Transfers

Your data is processed within the UK and EU. If we use services based outside the EU, we ensure they have appropriate safeguards (e.g., Standard Contractual Clauses).

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when changes were made.

14. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact us:

Email: hello@fairplayweb.co.uk
Subject: GDPR Data Request

15. Supervisory Authority

If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO):

ICO Website: ico.org.uk