Privacy Policy
Who handles your information
SparkSite is the website and managed care service operated by Kyrylo Biloshytskyi. For privacy requests contact hello@sparksite.uk. Our final business and service records identify the contracting party. This notice covers this website, SparkSite OS and customer support links.
What we collect
Enquiry forms collect your name, business name, email, optional phone and website, and message. We record the landing page, form and requested action, referrer and UTM campaign parameters when supplied. Business records can include contacts, outreach history, notes, tasks, projects, website details, invoices and payments. We do not collect payment card data through this website.
How enquiries and tickets work
An enquiry is stored in our database and linked to a CRM record and ticket before an email notification is queued. Email failure does not discard the enquiry. Customer support conversations and messages are retained as part of the ticket history. When you or our team reply, transactional notification emails are sent containing the message copy and a direct link to the support conversation. Customer ticket links allow anyone possessing a valid link to read and reply to that ticket; keep the link private. The private link is valid for 90 days and uses cryptographic token hashing; links can be rotated or revoked upon request. Internal notes are restricted to authorised workspace owners. File uploads are not enabled; document links may point to separately managed storage.
Why we use the information
We use enquiry and service information to respond to your request and take steps towards or perform an agreed contract. We use necessary business records and security measures for our legitimate interests in running and protecting the service, considering your rights. Accounting records may be retained to meet legal obligations. An enquiry does not subscribe you to marketing. We record objections to outreach so they can be respected.
Cookies and local storage
The public website remembers cookie preferences for up to one year. No optional analytics or advertising script is installed. On a protected enquiry form we use a signed short-lived anti-spam token. Workspace and customer support pages use an essential secure session cookie, with an idle timeout. Campaign attribution is read from the current URL; storing it between pages in this browser session requires optional-cookie consent.
Security and retention
Passwords are hashed with Argon2id. Workspace sessions are revocable and two-factor authentication is available. Ticket access tokens are stored as hashes and expire after 90 days unless revoked sooner. Security audit events are removed after 90 days; expired rate-limit and reset records are cleared by maintenance. Email payloads are encrypted at rest, erased after delivery or expiry, and queue records are removed after 30 days. Business and accounting records are reviewed for ongoing service, dispute and legal needs; deletion is a managed process rather than a fixed automatic purge. Ask us about a particular record.
Hosting, email and backups
Our database and application run on an OVH VPS. Authorised operators and service providers may process information as needed for hosting, email delivery and backups. Outbound email is delivered via authenticated TLS connections through IONOS (IONOS SE). Local database backups are restricted to server administrators and retained for 14 days. Any offsite backup destination and its protection must be reviewed before it is enabled. We do not sell personal data.
Transfers and external links
Where a provider handles information outside the UK, we must assess the applicable safeguards before enabling that processing. External services, payment providers and document links operate under their own notices. We do not load third-party fonts or optional tracking scripts on the public website.
Your choices and rights
You can ask to access, correct or erase your information, restrict or object to relevant processing, or request portability where applicable. Rights depend on the circumstances and legal retention requirements. Contact hello@sparksite.uk; we may need to verify your identity. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Review of this notice
This notice describes the implemented system. Provider details, the business service address, retention decisions and any future integrations must be reviewed before their use changes. It is not a substitute for professional data-protection advice.