Privacy Policy
How SparkSite uses personal information when you browse, enquire or use support.
Who is responsible
SparkSite is the trading name used by Kyrylo Biloshytskyi. Contact hello@sparksite.uk about your information or a privacy complaint. This notice covers the public website, business enquiries, SparkSite OS and private customer-support conversations.
Information we collect
When you enquire, we collect your name, business name, email address, project details and, if you provide them, your phone number and website. The form also sends the requested service, landing page, referring page and campaign parameters supplied in the URL. We keep relevant correspondence, support messages and business records if the conversation develops into work. Do not send passwords, payment-card details, identification documents or sensitive personal information through an enquiry or support message.
Website and security information
The hosting server processes IP addresses, request times, requested URLs and browser information in access and error logs. Security controls use rate-limit records, session information and anti-spam tokens. The public site loads its fonts and visual assets from SparkSite, not Google Fonts or an external image service. We do not install advertising pixels, session-replay tools or third-party visitor analytics on this public website.
Why we use information and our lawful bases
We use enquiry and contact information to answer requests, prepare proposals and administer business relationships. Where necessary to take steps you request towards a contract with you, or perform that contract, we rely on contract. For contacts acting for a company, general correspondence, service security, proportionate business administration and handling disputes, we rely on legitimate interests in communicating with business contacts, delivering the service and protecting it. Accounting and other records required by law are processed to meet legal obligations. Optional campaign-source storage in your browser is used only with your cookie choice. We do not use an enquiry as permission for a marketing mailing list.
Required and optional details
Name, business name, email and project details are needed for the enquiry form. A phone number is optional unless you request a callback; a website address is optional. If you do not provide enough information we may be unable to respond or quote. You can instead email us. Sending an enquiry does not start a paid service, create a contract or authorise an automatic payment.
Business contacts from other sources
Business records may also contain contact information obtained from a business website, public business listing, a referral or correspondence. We record and use relevant business information to assess and respond to potential business enquiries. Public availability is not consent to receive marketing. Where we obtain personal information indirectly, we provide this notice by the first communication or within one month, unless an applicable exception permits otherwise. You can ask us for the source of information about you and object to direct marketing at any time.
Who receives information
Authorised SparkSite operators and providers needed to deliver the service can access relevant information. OVH supplies hosting infrastructure and IONOS supplies outbound email. Email recipients receive the enquiry or support information needed for that conversation. Professional advisers or authorities may receive information where necessary for legal, accounting or dispute purposes. We do not sell personal data. Where a client website needs an additional provider or integration, we agree its scope and relevant data-processing arrangements before activation.
International processing
Hosting and email providers may process information outside the UK. The locations and safeguards depend on the relevant provider and service arrangement. Contact us for information about the destination and transfer arrangements relevant to your information. We must assess any new provider or international transfer before using it; this notice is not a claim that all providers store data exclusively in the UK.
Enquiries and private support links
An enquiry is saved in our business system before notification emails are queued. A notification failure does not delete the enquiry. Receipts and support replies may contain a message copy and a private link to the conversation. Anyone with a valid ticket link may be able to read and reply to that ticket: keep it private. Links expire after 90 days unless revoked earlier and can be replaced on request. Internal notes are restricted to authorised workspace owners. There are no public user registrations, public posts or file uploads on this site.
How long information is kept
We keep an enquiry and related correspondence while it is active and afterwards only while needed for follow-up requested by you, an agreed service, a genuine dispute or a legal retention requirement. Business records are reviewed and deleted manually when these purposes no longer apply; there is not currently an automatic deletion deadline for all CRM and ticket records. Accounting records are retained for the applicable tax and accounting requirements. Security audit events are removed after 90 days; expired security and rate-limit records are cleared by system maintenance. Email message payloads are erased after delivery or expiry and queue records are removed after 30 days. Local database backups rotate after 14 days. Public server logs rotate daily with 14 rotated files retained; error logs follow the hosting log rotation. A record may remain in a protected backup until that backup rotates. We can explain the retention criteria for a particular record when you contact us.
Cookies and browser storage
A first-party cookie and a local-storage preference remember your cookie choice for up to one year. If you allow optional campaign measurement, first-party session storage remembers the landing page, referring page and campaign parameters while the browser tab remains open. Rejecting optional storage clears that saved attribution. Secure session cookies on workspace and support pages are necessary for authentication and security; sessions have a 30-minute inactivity limit. See our Cookie Notice for names, purposes and durations.
Your rights and complaints
Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or object to processing. You have an absolute right to object to direct marketing. Where we rely on consent you can withdraw it without affecting earlier lawful processing; cookie settings are available in the footer. These rights have conditions and some records may need to be retained by law. We may need to verify your identity. We do not make decisions about you with legal or similarly significant effects solely by automated means. Email hello@sparksite.uk to exercise a right or complain. You can also complain to the Information Commissioner’s Office.
Children and changes to this notice
SparkSite markets website services to UK businesses. It is not designed or promoted as a service for children, and we do not ask visitors to provide a date of birth. If we learn that a child has sent personal information, we assess the circumstances and remove information that is not needed or otherwise lawfully retained. Contact us if this concerns you. We review this notice when the way we use information changes and publish the updated date here.