Privacy policy

Who is responsible

ISTALIF is responsible for the personal data processed through this website. Contact details are listed on the contact page. If a formal data controller identification is required, it is available on request.

What we collect

Enquiries. When you submit the project enquiry form we store the information you provide: your name, company, email address, optional telephone number, the type of enquiry, organisation size, optional budget range, preferred contact method and your message. We also store the language you used, the time of submission, your IP address and browser user agent. This is used to answer your enquiry and to protect the form against automated abuse.

Server logs. Our hosting provider records standard web server logs, which include IP addresses, requested pages, timestamps and user agents. These are used for operating and securing the site.

Administration. The people who edit this website have an account holding their name, email address, role and the time and IP address of their last sign-in. Their passwords are stored only as a cryptographic hash and cannot be read back. Two logs support that: a record of sign-in attempts, kept briefly so repeated failed attempts can be blocked, and an audit log of administrative actions — who published, changed or deleted what, and when. Neither log stores the contents of an enquiry.

What we do not do

This website loads no analytics, advertising or social media tracking. No data is transferred to third-party marketing platforms. No profiling or automated decision-making takes place.

Legal basis and retention

Enquiries are processed on the basis of your consent and our legitimate interest in responding to a request for our services. Enquiries are kept while they are relevant to an ongoing or potential engagement and are deleted when they are not. Records of sign-in attempts are removed automatically after a short period. Server logs are retained for a limited operational period by our hosting provider.

We have not fixed a numeric retention period for enquiries; when one is set it will be stated here rather than implied.

Sharing

Personal data is not sold or shared for marketing. It is stored with our hosting provider, who processes it on our behalf in order to operate the site and deliver email.

Your rights

You may request access to the personal data we hold about you, ask for it to be corrected or deleted, object to processing, or withdraw consent. Write to the address on the contact page and we will respond.

If you are in the EU or EEA and believe your data has been handled incorrectly, you may also complain to your national data protection authority.

Changes

This policy is updated when the website changes in a way that affects it. The date of the last change is shown at the bottom of this page.