Privacy Policy

At Purfaction, we are committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or engage with our consultancy services.

Who We Are

Our website address is: https://purfaction.smallbusinesswebsites.co.uk.

    Purfaction is a consultancy and support services business specialising in ISO implementation, internal auditing, facilities management, and procurement consultancy. We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    Information We Collect

      We may collect and process the following types of personal data:

      • Contact details such as your name, email address, phone number, and company details.
      • Professional information provided in relation to our consultancy services.
      • Website usage data including IP address, browser type, pages visited, and time spent on our site (via cookies and analytics).
      • Communications such as emails or contact form submissions.
      • For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
      • Location, IP address and browser type: we’ll use this for purposes like geolocating users and reducing fraudulent activities.
      • The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

      How We Use Your Information

        We use your information to:

        • Respond to your enquiries and provide the services you request.
        • Deliver consultancy services tailored to your business needs.
        • Send updates or relevant information (where you have opted in).
        • Improve our website and services through analytics.
        • Comply with legal and regulatory obligations.

        Legal Basis for Processing

        We process your data under the following legal bases:

        • Contractual necessity – to deliver our services to you.
        • Legitimate interests – to improve our services and manage our business operations.
        • Consent – where you have explicitly agreed (e.g. subscribing to updates).
        • Legal obligation – where we are required to comply with laws and regulations.

        Data Sharing

        We do not sell or rent your personal information. We may share your data with:

        • Trusted third parties who assist in delivering our services (e.g. IT providers or subcontractors), under strict confidentiality agreements.
        • Legal or regulatory bodies, if required by law.

        This site is scanned for potential malware and vulnerabilities by the SolidWP Site Scanner. We do not send personal information to the scanner; however, the scanner could find personal information posted publicly (such as in comments) during the scan.

        Data Retention

          We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, accounting, or reporting requirements.

          Your Rights

          You have the right to:

          • Access the personal data we hold about you.
          • Request correction or deletion of your data.
          • Object to or restrict how we process your data.
          • Withdraw your consent at any time (where applicable).
          • Lodge a complaint with the Information Commissioner’s Office (ICO).

          Cookies

          Our website uses cookies to enhance your experience and analyse usage. You can manage cookie preferences through your browser settings.

          If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

          When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

          If you request a password reset, your IP address will be included in the reset email.

          We’ll also use cookies to keep track of form elements while you’re browsing our site.

          A cookie named “itsec_interstitial_browser” is created to track a user’s login process to implement enhanced security features.

          How We Protect Your Data

          We implement appropriate technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction.

          Contact Us

          If you have any questions about this privacy policy or how we handle your data, please contact:

          Email:
          Phone: 07395 773917
          Address: 1 Park Crescent, Helston, Cornwall, England, TR13 8SE
          Company number: 09627412