Legal

Privacy Policy

What information FifteenFold collects through this website, why we use it, who may process it for us and the choices available to you.

Last updated: 27 September 2026

1. Who we are

FifteenFold is a web design, ecommerce and digital consultancy based in Hertfordshire, United Kingdom. For personal information collected through this website, FifteenFold acts as the data controller unless we tell you otherwise.

Privacy enquiries can be sent to hello@fifteenfold.co.uk.

2. Information we may collect

Depending on how you use the website, we may collect:

  • your name, email address, business name and contact details;
  • your website address and information you include in an enquiry, website review request or project brief;
  • the service, package, timing or business situation you select in a form;
  • campaign or referral information such as UTM parameters when it is attached to an enquiry;
  • technical information needed for website security, spam prevention, server logs and normal website operation;
  • analytics information where non-essential analytics has been enabled through an appropriate consent-aware setup.

Please do not send passwords, payment-card information, special-category personal data or other sensitive information through a general website form unless we specifically ask for it through an appropriate secure process.

3. How we collect information

Most information is provided directly by you when you send a contact form, request a Free Website Review, email us or begin discussing a project. Some technical information may be collected automatically by the hosting, security or consent tools used to operate the website.

4. Why we use personal information and our lawful bases

Purpose Typical information Lawful basis
Responding to an enquiry or website review request Contact details, business details, website and message Steps requested before entering a contract and/or our legitimate interest in responding to genuine business enquiries
Preparing, delivering and supporting paid work Project contacts, requirements, correspondence and delivery records Performance of a contract and our legitimate interests in managing the engagement
Operating the private Leads and Website Reviews queues Form information, status, reference, source and notes Our legitimate interests in managing enquiries reliably and avoiding lost requests
Security and spam prevention Technical request information and anti-spam signals Our legitimate interests in protecting the website and forms
Accounting, tax and legal records Relevant client and transaction records Legal obligations and legitimate business record-keeping
Optional non-essential analytics Usage and measurement information Consent where required

Where we rely on legitimate interests, we use information only where we consider that use necessary and proportionate and where your rights do not override those interests.

5. Enquiries and Free Website Reviews

Normal website enquiries are stored in a private WordPress Leads area before an email notification is attempted. Free Website Review requests are also stored in a private review queue so the request can be tracked through review and follow-up. These records are not public.

Submitting an enquiry does not automatically add you to a general marketing list.

6. Cookies, analytics and similar technologies

The FifteenFold theme does not directly inject Google Analytics or Google Tag Manager. If analytics or other non-essential measurement is enabled on the live website, it should be loaded through a consent-aware setup so visitors can make the choices required by applicable UK privacy and electronic communications rules.

Strictly necessary cookies or local storage may be used where required for security, form operation, preferences or other essential website functions. Any separate consent platform used on the live website should describe the cookies and vendors it controls.

7. Spam protection and security services

If Cloudflare Turnstile is enabled, information required to distinguish genuine form submissions from automated abuse may be processed by Cloudflare. Hosting, firewall, backup or security providers may also process technical information where needed to operate and protect the website.

8. Who we may share information with

We do not sell personal information. We may share or make information available to service providers that help us operate the business, for example:

  • website hosting, backup and security providers;
  • email and business communication providers;
  • WordPress plugins or form/security services used on the site;
  • analytics or consent providers where those services are enabled;
  • professional advisers where reasonably necessary;
  • public authorities where disclosure is required by law.

Providers acting on our behalf are expected to process personal information only for the relevant service and with appropriate safeguards.

9. International processing

Some technology providers may process information outside the United Kingdom. Where this happens, we expect the provider or transfer arrangement to use an applicable lawful transfer mechanism or other safeguard required by UK data-protection law.

10. How long we keep information

We do not keep every record indefinitely. Retention depends on why the information is held. As a working guide:

  • unsuccessful or inactive general enquiries and website-review records may normally be kept for up to 24 months so we can respond to follow-up questions and understand previous conversations;
  • client, contractual, financial and project records may be retained for longer where needed for delivery, warranty/support history, accounting, tax or legal record-keeping;
  • security and technical logs are kept for the period reasonably required for security, troubleshooting and abuse prevention;
  • where consent is the basis for processing, relevant consent or withdrawal records may be kept where necessary to demonstrate the choice made.

We may delete or anonymise records earlier where there is no longer a sensible reason to keep them.

11. Your rights

Depending on the circumstances and lawful basis, you may have rights including access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to processing, data portability and withdrawal of consent where consent is being relied on.

Your right to object

If we rely on legitimate interests, you can object to that processing. We will consider the circumstances and stop the processing where required unless there is a lawful reason to continue.

To make a request, email hello@fifteenfold.co.uk. We may need to verify your identity before acting on certain requests.

12. Complaints

If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office. Information about making a data-protection complaint is available at ico.org.uk.

13. Security

We use reasonable technical and organisational measures appropriate to the website and the information being handled. No internet service can guarantee absolute security, so please avoid sending confidential credentials or unnecessary sensitive data through standard enquiry forms.

14. Children

This website is aimed at businesses and people seeking business-related digital services. It is not directed at children and we do not knowingly use the website to collect personal information from children.

15. Automated decision-making

FifteenFold does not use information submitted through its website forms to make solely automated decisions that produce legal or similarly significant effects.

16. Changes to this policy

We may update this notice when the website, services, suppliers or legal requirements change. The date at the top of this page shows the current published version.

17. Contact

Questions or privacy requests can be sent to hello@fifteenfold.co.uk.