Skip to main content
Swift Page
Swift Page

Privacy notice

Privacy Policy

What happens to personal information that reaches this company, written so that each statement can be checked against the law it comes from.

last revised: 16 September 2026

Who this notice is from

Swift Page LTD Registered in England and Wales Company number 17460174 Registered office: 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE Email: contact@swiftpage.tips

Who is responsible for the information

binds: this company from: always source: UK GDPR Art 4(7) and Art 13

Swift Page LTD decides what personal information is collected through this website and through correspondence with it, and why. In data protection language that makes this company the controller of it.

Registered name
Swift Page LTD
Company number
17460174, registered in England and Wales
Registered office
82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE
Email
contact@swiftpage.tips

Anything on this page can be asked about at that address, and an email is the quickest way to reach a person about it.

What is collected, and where it comes from

binds: anybody who writes to us or becomes a customer from: the moment you write source: UK GDPR Art 13(1)(c) and Art 14(2)(f)

From you, when you ask for a review

Your name, your email address, the address of the website you want looked at, what it is built on, which pages matter to you and whatever you write in the boxes. The form on the Contact page assembles that into a message in your own browser and hands it to your own email application; nothing is typed into this website and kept here.

From you, during a project

If work is agreed, we hold what the work needs: correspondence, access details for your site or your hosting, and copies of your site taken as backups before anything is changed. A backup of a website can contain personal information about your own customers - orders, accounts, comments. Where it does, we are handling it on your instructions rather than for ourselves, and what may be done with it is fixed by the written agreement for that project.

Not from you

The company that hosts this website keeps its own server records of requests made to it: the address the request came from, the time, the page asked for and what browser asked. Those records exist to keep the site running and to deal with abuse. They are the hosting company's records, kept for about 30 days.

Nothing else is collected. There is no analytics on this website, no advertising network, no tracking pixel, no embedded video, no chat widget and no font fetched from another company's servers.

What it is used for, and why that is allowed

binds: this company from: always source: UK GDPR Art 6(1)(b), 6(1)(f) and 6(1)(c)

Each use of your information rests on one of three grounds.

Replying to you, quoting, and doing the work
Article 6(1)(b): it is necessary for a contract with you, or for the steps taken at your request before one is made.
Keeping a record of what was said and agreed
Article 6(1)(f), our legitimate interest in being able to show what was quoted, agreed, changed and measured if it is ever questioned. It is a narrow interest, it is limited to what a dispute would need, and you can object to it: see your rights over it.
Keeping accounting records
Article 6(1)(c): a legal obligation. Invoices and payment records have to be kept whether or not anybody wants them kept.

Nothing is used to market anything to you unless you ask to be told about something, and there is no mailing list on this site to join.

Your rights over it

binds: anybody whose information we hold from: immediately source: UK GDPR Art 15 to Art 22

You can ask us to:

  • give you a copy of what we hold about you, and tell you what we do with it;
  • correct anything that is wrong or incomplete;
  • delete it, where we have no continuing reason to keep it;
  • stop using it for a while, if you are disputing it;
  • stop relying on our legitimate interest, by objecting to it;
  • hand you, or somebody else, a machine-readable copy of what you gave us, where it was processed by automated means for a contract or with your consent;
  • stop relying on consent, where anything ever rested on consent, by withdrawing it.

Email contact@swiftpage.tips and say which of those you want. There is no charge, and an answer is owed within one month. If something has to be kept - an invoice, for instance - the reply says what is being kept and which law requires it, rather than refusing without explanation.

Who else sees it

binds: this company from: always source: UK GDPR Art 13(1)(e)

Your information is not sold, rented or shared for anybody else's marketing. It reaches:

  • the company that hosts this website, which necessarily sees requests made to it;
  • the company that provides our mailbox, which necessarily handles email you send us;
  • Stripe, our payment provider, when a payment link is issued to you. Stripe handles the card details and we never see or hold them;
  • an accountant, who sees invoices and payment records as part of preparing accounts and returns;
  • anybody the law requires, if we are obliged to hand something over, and no wider than the obligation.

Where a supplier is not named above, it is because naming a company we might change would make this page wrong the day we changed it. Ask and you will be told who is used today.

Whether it leaves the United Kingdom

binds: this company from: always source: UK GDPR Chapter V, Art 44 to Art 49

Some of the suppliers above are, or are part of, companies outside the United Kingdom, and email and payment services in particular are commonly run that way. Where information does leave the United Kingdom, it may only do so under one of the routes UK data protection law allows: a country the United Kingdom has decided gives adequate protection, or a contract in the approved form between us and the supplier.

Ask, and you will be told which supplier is involved and which of those routes is being relied on for it. This page does not name one here, because naming a route we have not checked for the supplier in use on the day you read it would be worse than saying so.

How long it is kept

binds: this company from: the date we receive it source: UK GDPR Art 5(1)(e); HMRC record-keeping rules
An enquiry that leads nowhere
Twelve months from the last message, then deleted.
Project correspondence and reports
Six years from the end of the project, so a question about what was agreed can be answered.
Backups of your site
Deleted within thirty days of the end of the project, or sooner if you ask. They are the most sensitive thing we ever hold and they are not kept as souvenirs.
Access credentials
Deleted at the end of the project. You should also change or revoke them at your end, and the closing message says so.
Invoices and payment records
Six years from the end of the accounting period they fall in, because tax law requires it.
Server records of this website
About 30 days, by the hosting company, on its own schedule.

Whether you have to give us anything

binds: anybody asking for a review from: before you send anything source: UK GDPR Art 13(2)(e)

There is no legal or contractual obligation to give us anything. Three things are needed before a reply is possible at all - a name, an email address, and the address of the site - and without them nothing can be answered or measured. Everything else on the form can be left empty; it only makes the first reply more useful.

During a project, access details are needed to carry out work on your site. Withholding them does not breach anything; it simply means that part of the work cannot be done, and the quotation is adjusted rather than the work guessed at.

Cookies and browser storage

binds: every visitor to this website from: the first page you open source: PECR reg 6

This website sets no cookies. It puts nothing in your browser's storage, and it reads nothing from it. There is no consent banner because there is nothing to consent to, and no separate cookie policy because the law does not require a page to say this at greater length.

That is a design decision rather than an oversight, and it is one you can check: nothing on any page here is fetched from another company's servers. The typefaces, the stylesheet and the small amount of script that makes the request form work are all served from this site's own address.

The request form on the Contact page puts your request together inside your own browser and hands it to your own email application. What you type there is not transmitted to this website, and it is not kept in your browser afterwards.

Automated decisions and profiling

binds: this company from: always source: UK GDPR Art 13(2)(f) and Art 22

There are none. Nothing about you is decided by a machine, no profile is built of you, and nothing you send is scored or ranked automatically. A person reads every request and a person writes every reply.

Complaining about any of this

binds: anybody whose information we hold from: immediately source: UK GDPR Art 77; Data Protection Act 2018 s.165

Write to contact@swiftpage.tips first. You will get an answer, and if something has gone wrong you will be told what and what is being done about it.

You can complain to the Information Commissioner's Office at any time, whether or not you have raised it with us. You do not have to come to us first.

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Online
ico.org.uk

When this page changes

binds: this page from: 16 September 2026 source: this company's own practice

The date of the last revision is at the head of the page. If anything on it changes in a way that affects work already under way or an enquiry already sent, the people affected are told by email rather than left to notice. Anything else changes here, and the date moves with it.