Privacy Policy

The company responsible for the information described on this page - the controller, in the words of the law - is Shine Pages Limited, a company registered in England and Wales with company number 17457190, whose registered office is at 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE.

Write to us about anything on this page at communications@shinepages.tech, or by post to the address above. We have not appointed a data protection officer, because the law does not require a company of this kind to have one; enquiries go to the address above and are answered by us.

Almost all of it comes from you, in an email you chose to send. This site has no accounts, no login and no tracking, and it asks for nothing that is not needed to answer you or to design the document you have ordered.

• What you write to us. Your name, the address you write from, the company you write on behalf of, and whatever you tell us about the document you have in mind. The enquiry form on this site does not send anything itself: it writes the message into your own email application, and the copy we receive is the one you send from there.
• The material for your document. Text, pictures, logos and brand guidance you send us for the work. Where those contain personal information about your staff - names, roles, portraits - we handle that material for you and on your instructions.
• Records of an order. The quotation, the order confirmation, correspondence, invoices and proof of payment.
• Server logs. Our hosting provider records ordinary technical details of a visit: the internet address the request came from, the time, the page, and the browser's own description of itself. They are created by the hosting provider rather than by anything on this site, and we do not use them to build a picture of a visitor.

We do not buy contact details, we do not take information from social networks, and we do not ask for special category information - health, beliefs, and the rest of the list in Article 9 of the UK GDPR. Please do not send it: we have no use for it.

Four things, and nothing else. Answering your enquiry and preparing a quotation. Designing, revising and delivering the document you have ordered. Keeping the records a company has to keep - invoices, accounts, and enough of the correspondence to show what was agreed. Keeping the site and the mailbox secure and working.

We do not send marketing emails, we do not run a mailing list, and we do not pass your details to anyone who wants to sell you something.

Each use above rests on one of three grounds in Article 6(1) of the UK GDPR, and it is worth saying which, because two of them carry rights that the others do not.

• Article 6(1)(b), the contract and the steps before it. Quoting for a document, agreeing it, designing it and delivering it. Answering an enquiry is a step taken at your request before a contract, so it falls here too.
• Article 6(1)(f), our legitimate interests. Keeping a record of what was discussed and agreed, being able to answer a later question about a document we designed, and keeping the mailbox and the site secure. The interest is being able to run and defend the business properly; we have weighed it against your own interests and consider it does not override them, and you may object, as the eighth clause explains.
• Article 6(1)(c), a legal obligation. Keeping accounting and tax records for the period the law requires.

Where you send us material about your own staff for the document, you decide what goes into it and we act on your instructions, so in respect of that material you are the controller and we are a processor for you.

As few as possible, and none of them for their own purposes. Nobody is sold anything and nobody is given access who does not need it to do the job in front of them.

• Our hosting provider, which serves this website and creates the server logs described above.
• Our email provider, which carries and stores our correspondence with you.
• Stripe, where you pay by card or through a payment link on an invoice. Stripe takes the card details on its own page, handles them under its own terms, and we never see or hold them.
• Our accountant and our bank, for invoices, payments and the annual accounts.
• Anyone we are obliged to tell - a court, a regulator, or a public authority acting within its powers.

We will name the hosting provider and the email provider in writing if you ask; they are named by category here because a change of supplier should not quietly make this page untrue.

Some of the suppliers above are based outside the United Kingdom, or store information on servers that are. Where that happens, the transfer is made under the safeguards Chapter V of the UK GDPR allows - either to a country the United Kingdom has decided offers adequate protection, or under the International Data Transfer Agreement or the Addendum to the European standard contractual clauses.

If you would like to know where a particular supplier keeps information, and which safeguard applies to it, write to us and we will tell you.

Only as long as there is a reason to, and the reason is different for each kind of record. These are the periods we work to.

• An enquiry that does not become an order: twelve months from the last message, then deleted.
• Orders, invoices and accounting records: six years from the end of the financial year they fall in. That follows from tax record-keeping and from the six-year limitation period for a contract claim under the Limitation Act 1980.
• The material you sent and the working files: twenty-four months after handover, so a document can be updated without being rebuilt, and then deleted. Ask us earlier and we delete them earlier; ask us to keep them longer and we will agree it in writing.
• Server logs: for the period our hosting provider sets. We will confirm that period in writing on request.

You may ask us to do any of the following, and we answer within one month. There is no charge, unless a request is manifestly unfounded or excessive, in which case we will say so and explain why before doing anything.

• See it. A copy of the information we hold about you, and what we do with it.
• Correct it. Have anything inaccurate put right, or anything incomplete completed.
• Erase it. Have it deleted, where we no longer need it for the purpose it was collected for and no legal duty requires us to keep it.
• Restrict it. Have us hold it but stop using it, while a question about its accuracy or our grounds is settled.
• Object. Object to anything we do on the ground of legitimate interests. We stop unless we can show compelling grounds that override your interests, and we stop outright if the objection is to direct marketing - which we do not do in any case.
• Take it with you. Receive the information you gave us in a common machine-readable format, or have it sent to someone else, where we rely on the contract or on consent and handle it by automated means.
• Withdraw consent. Where we ever rely on consent, withdraw it at any time. That does not affect anything done before you withdrew it.

To exercise any of these, write to communications@shinepages.tech. We may ask you to confirm who you are, so that we do not hand somebody else's information to the wrong person.

Tell us first, at communications@shinepages.tech. We would rather put something right than have you take it elsewhere unanswered, and we will acknowledge a complaint within five working days and answer it in full within fourteen days.

You can also complain to the Information Commissioner's Office, which supervises data protection in the United Kingdom, and you may do so without asking us first. The address is Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, and the website is ico.org.uk.

Nothing on this site is compulsory, but some of it is unavoidable if you want a document from us. Without a name and an address to reply to, we cannot answer an enquiry; without the material for the pages, we cannot design them; without billing details, we cannot invoice an order.

Everything else is optional, and leaving it out has no consequence beyond a question or two more in the reply.

There are none. We do not make decisions about you by automated means, and we do not profile you. Quotations are written by a person reading what you sent.

This site sets no cookies, and stores nothing in your browser: no local storage, no session storage, no tags, no analytics, no advertising pixels and no embedded players that would set any of those for us.

That is why there is no cookie banner and no separate cookie policy - regulation 6 of the Privacy and Electronic Communications Regulations asks for consent before storing or reading anything on your device, and there is nothing here to consent to. If that ever changes, this clause changes with it, and consent is asked for before anything is stored.

A changed notice is published on this page carrying a new date, and the date of this edition is printed at the top. Where a change materially affects what we do with information we already hold, we write to the customers it affects rather than leaving it to be noticed.

The edition that applies to an order is the one in force on the day the order confirmation was sent, and we will send you a copy of it on request.