Your data, in plain English.

Who this policy covers

This applies to anyone who visits fesocial.co.uk, fills in the enquiry form, emails me, or logs into the client portal. I'm the "data controller" for the purposes of UK GDPR, meaning I'm responsible for deciding what data is collected and why.

The enquiry form (/start)

When you fill in the "Start a project" form, your browser builds an email from what you've typed (name, business name, email, phone if you gave one, what you need help with, and your message) and opens it in your own email app, addressed to freddie@fesocial.co.uk. That email only actually sends if you choose to send it, from your own email account. This website itself doesn't receive, store, or log anything you type into that form, it never touches my server.

Emails you send me

Once you send an email, whether through the enquiry form, the footer's email button, or just directly, it lands in my inbox like any other email. I'll use your name, contact details, and whatever you've told me to reply, discuss the work, and, if we go ahead, deliver and manage the project. I keep that correspondence for as long as is reasonably needed for the business relationship, ongoing projects, and my own accounting and legal obligations, and I'll delete it sooner if you ask and there's no reason I need to keep it.

The client portal

If you're an active client, you'll have a username and passcode for the portal at /brief. Passcodes are never stored in plain text, only as a one-way cryptographic hash that can't be reversed back into your original passcode. Logging in sets a small cookie so you stay signed in, see the cookie policy for the details. For clients on the Social Media package, I also keep a running count of posts used this billing cycle (just a number and a date, tied to your username) so the portal can show you where you stand, stored via Netlify's hosting infrastructure rather than a separate database.

When you send a brief through the Post Brief Studio, the layout you've sketched, any notes you've added, and any reference photos you've attached are saved the same way (Netlify's hosting infrastructure, not a separate database) so they land directly in my inbox inside the portal, nothing is emailed out or leaves that storage. I can read, download, and delete each one from there; I delete them once a brief has been actioned and there's no reason left to keep it.

Who else sees it

I don't sell, rent, or share your data with advertisers, and I don't run Google Analytics, Meta Pixel, or any other tracking or marketing scripts on this site. A couple of third parties are involved simply in making the site work:

• Netlify, who host this site and, for client portal accounts, store the small usage data described above. Like any host, they'll process standard technical server logs (things like IP address and request times) as part of running the infrastructure.
• Google Fonts, which this site loads to display its typefaces. That means your browser makes a direct request to Google's servers when the page loads, and Google may process standard request data (such as your IP address) as part of serving that font file.

Your rights

Under UK GDPR you can ask to see what personal data I hold about you, have it corrected, have it deleted, or object to how it's used. To do any of that, just emailfreddie@fesocial.co.uk. If you're not happy with how I've handled your data, you can also complain to theInformation Commissioner's Office (ico.org.uk), the UK's data protection regulator.

Children

This site is aimed at business owners, not children, and I don't knowingly collect data from anyone under 13.

Changes to this policy

I may update this page occasionally, for example if the site or how it's run changes. The date at the top always shows when it was last revised.

Contact

Questions about any of this, emailfreddie@fesocial.co.uk.