Privacy Policy

Who we are

This website, graeyna.com, is operated by GRAEYNA LIMITED, a company registered in England and Wales under company number 17330833. Our registered office is 85 New Village Way, Morley, Leeds, England, LS27 7GD. On this site we call ourselves simply “Graeyna”. GRAEYNA LIMITED is the data controller for the personal data described in this notice. You can contact us about anything in this policy at [email protected].

What we collect, and why

The only personal data this website collects is what you choose to send us through the contact form: your name, email address, company name (optional), the type of project you're interested in, and your message. Alongside those, we record the IP address the enquiry was sent from and the time it was submitted, which help us prevent abuse of the form. Your enquiry is stored in our database and a copy is emailed to our own inbox so we can reply.

We use this information solely to respond to your enquiry and discuss your project. The lawful basis for this processing is our legitimate interest in responding to business enquiries made to us.

Cookies

This site sets only the essential cookies that Laravel, the framework it is built on, needs in order to work securely: a session cookie and a matching CSRF security token, which protect the contact form against forged submissions. There are no analytics, marketing or advertising cookies, no tag managers and no tracking scripts. The one third-party service this site loads is Cloudflare Turnstile, which protects the contact form against bots and is described below.

Hosting and infrastructure

The site is hosted with Hostinger, whose servers keep standard access logs (which include IP addresses) for security and troubleshooting, as almost all web hosting does. The site is served through Cloudflare, which provides our DNS and content delivery network; to route and protect traffic, Cloudflare processes the IP address of each visit on our behalf. Enquiries you send are stored in our own database with our hosting provider and are accessible only to us.

Bot protection

Our contact form is protected by Cloudflare Turnstile, a privacy-focused bot-detection service. When you submit the form, Turnstile may process technical information about your visit, including your IP address and browser signals, to distinguish people from automated traffic. This processing is carried out by Cloudflare on our behalf; you can read Cloudflare's own privacy policy at cloudflare.com/privacypolicy.

Who we share data with

We do not sell, rent or trade your personal data, and we will not use it to send you marketing without your consent. Beyond the service providers named above — Hostinger (hosting) and Cloudflare (CDN, DNS and Turnstile), which process data only to provide those services — your data is not shared with anyone, unless the law requires us to disclose it.

How long we keep enquiries

We keep contact enquiries for as long as they are relevant to responding to you and, after that, as part of our normal business records. If you would like an enquiry you sent us deleted, just ask and we will remove it.

Your rights

Under UK data protection law you have rights over your personal data, including the right to access it, correct it, or ask us to delete it. To make a request, contact us at [email protected] and we'll respond within one calendar month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.