Privacy Policy
Please read this policy before using the Boilerlykit website or requesting our services.
Boilerlykit ("Boilerlykit", "we", "us", or "our") is committed to protecting your privacy and the security of personal data processed through this website and our services. This Privacy Policy explains what we collect, why we collect it, our legal bases, how long we keep data, how we share it, and the measures we use to protect it.
If you have questions, contact our privacy team at privacy@boilerlykit.com.
1. About Boilerlykit (Controller)
Boilerlykit is the controller for the processing described in this Policy.
Privacy: privacy@boilerlykit.com
General: contact@boilerlykit.com
2. Scope
This Policy applies when you visit boilerlykit.com, contact us, subscribe to updates, or use our web design, SEO, and related services. It does not apply to websites, tools, or content you operate yourself after a project handoff, or to third-party sites linked from our website. Those have their own notices.
3. What We Collect, Why, and How Long
3.1 Contact and site audits
When you request a site audit or email us, we collect your name, email, company or trade, and message so we can reply and discuss a possible engagement (where the GDPR applies, contract steps you request, Art. 6(1)(b)). We keep these messages for as long as needed to respond and for a reasonable follow-up period, typically up to 24 months, unless you ask us to delete them sooner.
3.2 Newsletter
If you subscribe, we collect your email and your consent so we can send updates you opted into (Art. 6(1)(a)). We keep the address until you unsubscribe.
3.3 Client project work
During an engagement we process the materials you choose to share, such as brand assets, feedback, and site access you provide, so we can deliver the scoped work (Art. 6(1)(b)). We keep project files for the engagement and a reasonable archive period afterward, or as stated in your proposal.
3.4 Website operation and security
Our hosting and, when enabled, analytics tools may process IP address, browser type, pages viewed, and approximate location from that technical data. We use this to run the site, troubleshoot, and protect it from abuse (Art. 6(1)(f)). Server logs are kept on a shorter cycle than contact records.
3.5 Payments
We do not store full card numbers or CVV codes on our systems. Invoices for service work are handled through the payment method agreed in your proposal. We do not sell personal data.
4. Legal Bases
Where the GDPR applies, we rely on:
- Contract necessity, including steps you ask us to take before a contract (Art. 6(1)(b)).
- Legitimate interests, such as site security, abuse prevention, and improving the website (Art. 6(1)(f)).
- Consent, for the newsletter and any optional analytics cookies (Art. 6(1)(a)). You can withdraw consent at any time.
- Legal obligation, where a law requires us to keep a record (Art. 6(1)(c)).
5. Retention
We keep personal data only as long as needed for the purposes above. Contact messages are typically kept up to 24 months. Newsletter addresses are kept until you unsubscribe. Project files follow the engagement and any archive period in your agreement. Operational logs are kept for a shorter period. When a retention period ends, we delete or anonymize the data.
7. International Transfers
Some of these providers are located in the EU/EEA, the United Kingdom, or the United States. Where personal data is transferred outside a region that requires extra protection, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses. You can ask for a summary of those safeguards at privacy@boilerlykit.com.
8. Security
We use technical and organizational measures appropriate to a small professional services site, including encrypted connections (HTTPS), access limited to people who need it, and reputable processors for hosting and email. No method of transmission or storage is completely secure. If you believe your data has been exposed, email privacy@boilerlykit.com.
9. Your Rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal data, to object to certain processing, and to withdraw consent. We will respond without undue delay and, where the GDPR applies, within one month (extendable by up to two months for complex requests).
Email privacy@boilerlykit.com. You may also lodge a complaint with your local supervisory authority.
11. Children
This website and our services are meant for businesses and adults. We do not knowingly collect personal data from children.
12. Changes
We may update this Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the site after that date means you accept the updated Policy.
13. Contact
Privacy questions: privacy@boilerlykit.com.
General contact: contact@boilerlykit.com.