Legal

Privacy Policy

Last updated: 9 May 2026

This page explains what personal data Serafim Tech Limited ("we", "us") collects when you visit serafimtech.io, why we collect it, and what your rights are under the UK GDPR and the Data Protection Act 2018.

We are the data controller for personal data processed through this website. Our registered office is 124-128 City Road, Islington, London, EC1V 2NX, United Kingdom (Company No. 12884078).

1. What we collect

This is a marketing site with no accounts, forms, or analytics on top of basic logs. The data we touch is limited:

• Correspondence. If you email us at hello@serafimtech.io we receive your name, email address, and whatever you choose to include in the message.
• Server and CDN logs. Our hosting provider (Amazon Web Services, via CloudFront and S3) records standard request metadata: IP address, user agent, referrer, timestamp, requested path, and response status. These logs are used for security and operational diagnostics.
• Third-party fonts. The site loads typefaces from Google Fonts. When fonts load, your browser connects to Google's servers and Google may receive your IP address and user agent. See Google's Privacy Policy for details.

We do not use advertising trackers, behavioural analytics, or third-party cookies on this site.

2. Why we use it

• To reply to your messages and follow up on enquiries.
• To keep the site available, secure, and free of abuse.
• To meet our legal and accounting obligations where applicable.

3. Lawful basis

We rely on legitimate interests (UK GDPR Article 6(1)(f)) for responding to enquiries and for security and abuse prevention, and on legal obligation (Article 6(1)(c)) where we have to retain records for tax or compliance reasons.

4. Sharing & sub-processors

We do not sell or rent personal data. We rely on a small number of providers to run the site:

• Amazon Web Services — hosting, CDN, email infrastructure.
• Google Fonts — typeface delivery.

These providers act on our instructions and are bound by their own data-protection commitments.

5. International transfers

Some of our providers process data outside the UK. Where this happens we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, depending on the destination.

6. Retention

• Email correspondence: kept for as long as it is relevant to our relationship with you, then deleted.
• Server and CDN logs: retained for a short operational period (typically up to 90 days) and then automatically expired.

7. Your rights

Under UK data-protection law you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data ("right to be forgotten"), subject to legal exceptions.
• Object to or restrict processing based on legitimate interests.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these rights, email hello@serafimtech.io. We aim to respond within 30 days.

8. Complaints

If you believe we have mishandled your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

9. Cookies

This site does not set tracking cookies. Your browser may still receive technical cookies from third-party providers (such as Google Fonts) when their resources load, in line with their own policies.

10. Changes

We may update this policy from time to time. The "last updated" date at the top reflects the most recent change. Material changes will be highlighted on the site.

11. Contact

Questions about this policy or how we handle your data? Email hello@serafimtech.io.