Privacy Policy

1. Introduction

WebFlare (Daniel Picciau) ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. What Personal Data We Collect

We collect and process the following types of personal data:

2.1 Contact Form Submissions

• Required: Name, email address, message content
• Optional: Phone number, company name, selected service
• Automatically collected: IP address, timestamp, user agent (for security and consent verification)

2.2 Project Sign-Off Forms

• Client name, project details, signer information
• Digital signature
• Testimonials and ratings (if provided)
• Portfolio permission consent
• Future service interests

2.3 Website Usage Data

• Cookie preferences and consent
• Google Analytics data (only with your consent)
• Page views and navigation patterns (anonymized)

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Purpose	Legal Basis
Contact form responses	Consent - You explicitly agree to be contacted
Project sign-off agreements	Contract performance - Necessary for fulfilling our service agreement
Testimonials and portfolio use	Explicit consent - You opt-in to share testimonials
Analytics cookies	Consent - You accept analytics cookies
Legal compliance and security	Legal obligation - Required for fraud prevention and compliance

4. How We Use Your Data

We use your personal data for the following purposes:

• Responding to inquiries: To answer your questions and provide service information
• Contract fulfillment: To deliver web development services and manage projects
• Marketing communications: Only if you explicitly consent to receive updates
• Service improvement: To analyze and improve our website and services
• Legal compliance: To comply with legal obligations and resolve disputes

5. Data Retention

We retain your personal data only as long as necessary:

Data Type	Retention Period
Contact form submissions	2 years from last contact
Project sign-off documents	7 years (legal requirement for business records)
Lead information	3 years from last activity
Cookie consent records	2 years from last consent update
Audit logs	7 years (GDPR Article 30 compliance)

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access (Article 15): Request a copy of all personal data we hold about you
• Right to Rectification (Article 16): Request correction of inaccurate data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Article 18): Limit how we use your data
• Right to Data Portability (Article 20): Receive your data in a machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Article 7(3)): Withdraw consent at any time

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: HTTPS/TLS encryption for all data transmission
• Access controls: Strict authentication and authorization for admin access
• Audit logging: All data access is logged for security monitoring
• Regular backups: Encrypted backups stored securely
• Password security: Minimum 12-character passwords with complexity requirements
• Session security: Auto-logout after 1 hour of inactivity

8. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• Service providers: Hosting (with data processing agreements in place)
• Analytics: Google Analytics (only with your consent, IP anonymization enabled)
• Legal authorities: If required by law or to protect our legal rights

International transfers: Your data is primarily stored in the UK/EU. Any transfers outside the EU are protected by appropriate safeguards (GDPR Article 46).

9. Cookies and Tracking

Essential cookies: Required for website functionality (no consent needed).

Analytics cookies: Google Analytics (requires consent). We use IP anonymization and do not track individual users without permission.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email if you have an active relationship with us.

12. Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with: