Privacy Policy

Last updated: 9 September 2026

This privacy policy explains how Flarewing collects, uses, and protects information when you visit this website, get in touch, or engage us for a project. We take a minimal-data approach - only collecting what's needed to run the business and respond to you - and never sell your data or use it for advertising.

Who Flarewing is

Flarewing is a technical consultancy based in the UK, operating as the data controller for the information described in this policy. See Contact for how to reach us directly, including for any privacy query.

Information collected via this website

  • Enquiry / contact form - name, email address, organisation name, and the content of your message. Provided voluntarily when you get in touch.
  • Newsletter sign-up (if offered) - email address only, used solely to send occasional updates. Opt-in, with an unsubscribe link in every email.
  • Technical/log data - collected automatically by the hosting provider as part of serving the site (e.g. IP address, browser type, request timestamps). See Hosting and other service providers below.
  • Analytics data - anonymised, aggregated usage statistics. See Analytics below.

We do not use advertising trackers, and do not build profiles of visitors.

How this information is used

  • Responding to enquiries and quoting/scoping potential projects
  • Delivering and administering services for engaged clients, including invoicing and legal/accounting record-keeping
  • Sending newsletter updates, where you've opted in
  • Understanding how the site is used, in aggregate, to improve it
  • Meeting legal obligations (e.g. tax records)

Analytics

This site uses a privacy-friendly, cookieless analytics tool to understand how visitors use it. This tool:

  • Does not set cookies and does not require a cookie consent banner
  • Fully anonymises and aggregates all data collected
  • Does not track individual users across sessions or build user profiles
  • Does not share data with advertising or tracking networks

Data collected includes general metrics such as page views, approximate geographic region (country/city level), browser type, and referral source. None of this can be used to identify you personally.

Cookies

This site does not use cookies for tracking or advertising. The analytics tool described above is JavaScript-based rather than cookie-based, so it doesn't set cookies either. If a functionally necessary cookie is ever introduced (e.g. to remember a cookie banner dismissal), this policy will be updated to reflect it.

Client project data

If you engage us for a project, any data belonging to you or your organisation that's processed as part of that work (e.g. content, user data, or systems we're given access to) is governed by the terms agreed in the contract or a separate data processing agreement, not by this website policy. We only access what's necessary to deliver the agreed work, and handle it in line with the confidentiality and security terms agreed with you.

Subcontractors and third parties

For work that requires design or graphic design outside our own scope, we may subcontract to external designers (trusted people from our own professional circle, not agencies found at arm's length) who are bound by confidentiality and data protection obligations. We don't share your information with any other third party except where necessary to deliver a service you've requested (e.g. a hosting provider) or where required by law.

Hosting and other service providers

This site is hosted and operated using third-party service providers (e.g. hosting, email delivery). As a normal part of serving web traffic and email, these providers may process technical data such as IP addresses on our behalf. In line with the values set out on the Ethics & Values page, we favour smaller, privacy-respecting European providers where practical, over larger Big Tech alternatives.

Legal basis for processing

Where UK GDPR applies, information is processed on the following bases:

  • Consent - e.g. newsletter sign-up, which you can withdraw at any time
  • Contract - e.g. processing enquiry and client data needed to quote, deliver, and invoice for a project
  • Legitimate interests - e.g. aggregated analytics to improve the site, and responding to unsolicited enquiries

Data retention

Enquiry data is kept only as long as needed to respond to you or, if it leads to a project, for the duration of that engagement plus any period required for legal, accounting, or tax purposes. Newsletter data is kept until you unsubscribe. Data no longer needed is deleted or anonymised.

International transfers

Where a service provider we use stores or processes data outside the UK or EEA, we only use providers with appropriate safeguards in place (such as adequacy decisions or standard contractual clauses).

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data, where applicable
  • Restrict or object to certain processing
  • Request a copy of your data in a portable format
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator

To exercise any of these rights, contact us via the details on the Contact page.

Changes to this policy

This policy may be updated from time to time - for example, if the services or tools this site uses change. Any changes will be posted here with an updated "Last updated" date.

Contact

Questions about this policy or how your data is handled can be sent via the details on the Contact page.