Legal
Privacy policy
This policy explains what Upright Sites does with personal information collected through this website. It is written to be read, not to be survived.
Who is responsible
Venny Daniels, trading as Upright Sites, of 16 York Place, Portsmouth, PO1 3LB, is the data controller for the information described here — meaning we decide what is collected and why. Upright Sites is a sole trader, so the person named here is personally responsible for the commitments on this page.
Contact us about anything on this page at hello@uprightsites.co.uk. We are registered with the Information Commissioner's Office, registration number ZC256172.
What we collect, and why
When you use the contact form. We collect what you type: your name, your business name, the email address or phone number you want a reply on, the package you are asking about, and your message. Alongside it we automatically record the time you sent it, the country your connection came from, and your browser's identification string — we keep those to spot and block abuse of the form, not to profile you. We use all of it only to reply to you and to carry out any work that follows. Our lawful basis is legitimate interests — answering an enquiry you chose to send us. We do not use these details for marketing, and we do not sell or rent them to anyone.
When you simply visit. Our hosting provider records standard server information — IP address, browser type, the page requested, the time — for security and to keep the site running. Our lawful basis is legitimate interests in keeping the site available and defended against abuse. We do not use analytics, and there is no advertising or third-party tracking anywhere on this site.
We do not ask for, and have no use for, special category data — anything about health, ethnicity, beliefs, sex life or politics. Please do not put it in the message box.
How long we keep it
- Enquiries that do not become work — deleted automatically 365 days after you send them. This is enforced by the storage itself, not by us remembering to do it.
- Enquiries that do become work — kept for the length of the project and then for at least five years after the 31 January tax return deadline for the year the work was invoiced, because records connected to a contract and to tax have to be retained.
- Server logs — held by our hosting provider on their own retention schedule, generally days rather than months. We do not keep a separate copy.
Who else handles it
We use a small number of suppliers to run the site. They process data on our instructions only, under a contract, and cannot use it for their own purposes.
- Cloudflare — hosting, protection against attacks and spam (including the bot checks described under cookies below), and storage of contact form submissions.
- Fastmail — receiving and storing the email we send and receive.
Some of these suppliers operate outside the UK. Where information leaves the UK it is protected by the safeguards UK data protection law requires, such as an International Data Transfer Agreement or UK Addendum. We will also disclose information if the law requires it.
Cookies and similar storage
This site sets one cookie, cf_clearance. Cloudflare, our
hosting provider, sets it on every page as part of its protection against
bots and attacks, and it lasts up to a year. It records that your browser
has passed Cloudflare's automatic check, so you are not checked again on
every visit. It is strictly necessary to keep the site secure, so it is set
without asking: the law requires consent only for cookies that are not
strictly necessary.
The contact page also loads Cloudflare Turnstile, the check that confirms a real person is sending the form rather than a bot. It runs in a small frame served from Cloudflare's own domain (challenges.cloudflare.com), keeps one item of data in your browser under that domain, and sees your IP address and browser details in order to tell people from bots. It sets no cookie on this site, and it is likewise strictly necessary to stop the form being abused.
Neither is used for advertising or analytics. There is no consent banner because there is nothing optional to consent to. You can block or delete cookies and site data in your browser settings, though the contact form may then refuse to submit. There is no analytics, advertising or third-party tracking on this site of any kind.
Your rights
Under UK data protection law you can ask us to:
- show you a copy of the information we hold about you;
- correct anything that is wrong;
- delete it, where we have no continuing reason to keep it;
- stop or limit what we do with it, or object to it;
- send you a portable copy where that applies.
Email hello@uprightsites.co.uk. We will reply within one month, and there is no charge.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you told us first so we can put it right.
Last updated 24 October 2026