Privacy Policy

Who I am

ClientFair is a trading name of Gareth Page, a sole trader based in Caerphilly, South Wales. I am the data controller for the information described on this page. You can reach me at gareth@clientfair.uk or on 07447 185798.

What I collect, and why

If you enquire

Your name, business name, phone number, email address, and anything you tell me about your business. I use it to reply to you, to build your website if you ask me to, and to keep a record of what we agreed.

Lawful basis: legitimate interests, and where we go on to work together, performance of a contract.

If I contact you first

Where I approach a business directly, I use information that business has published publicly, such as a business phone number on a Google Business Profile. I record the fact I contacted you and what you said.

Lawful basis: legitimate interests. You can tell me to stop at any time and I will, immediately and permanently.

If you become a customer

Contact details, billing details, the content you give me for your website, and records of the service I provide. Payment card details are handled by the payment provider and never by me.

Lawful basis: performance of a contract, and legal obligation for records I must keep.

Your own customers' information

If you take a paid plan, my tools will handle information about your customers, such as phone numbers, messages and appointments. For that information you are the data controller and I am your processor. I only act on your instructions, I do not use it for anything of my own, and it stays yours. A written processing agreement forms part of your plan.

When you visit this website

Standard technical information such as IP address, browser, and which pages you looked at, plus anything set by the cookies described in the Cookie Policy.

Who else sees it

I use a small number of suppliers to run the service. They only process information on my instructions.

Some of these are based outside the UK. Where information leaves the UK it is protected by the UK International Data Transfer Addendum, or by the UK extension to the EU-US Data Privacy Framework.

I do not sell your information. I do not share it with anyone else for their own marketing.

How long I keep it

• Enquiries that go nowhere: up to 12 months, then deleted.
• Customers: for as long as you are a customer, then 6 years for tax and accounting records.
• Your customers' information: for as long as your plan runs. Within 30 days of your plan ending I will return it or delete it, whichever you ask for.
• Anyone who asks not to be contacted: I keep the minimum needed to make sure I do not contact you again.

Your rights

Under UK data protection law you can ask me to show you what I hold about you, correct it, delete it, restrict what I do with it, hand it over in a portable format, or stop using it for legitimate interests. Email gareth@clientfair.uk and I will deal with it within one month. There is no charge.

Text messages and calls

Where I text or call a business directly, I do so in line with the Privacy and Electronic Communications Regulations. Every message tells you who it is from and how to stop them. Reply STOP, or just tell me, and it ends there.

Security

Information is held in the systems listed above, all of which use encryption in transit and at rest. Access is limited to me. I am a one-person business, so there is no wider staff access to control. If there were ever a breach that put your rights at risk, I would tell the ICO within 72 hours and tell you without delay.

Changes

If this policy changes I will update the date at the top. If the change is significant and affects you, I will tell you directly.