Privacy

Short version: we collect the minimum needed to answer you and to deliver work you have hired us for, we keep it only as long as it is worth keeping, and we share it with nobody beyond the services that carry the email. No advertising, no tracking, no selling of data, ever.

Who we are. Cyberfu Ltd is the company behind this website and the services described on this page, registered in England and Wales and based in Milton Keynes, United Kingdom. You can reach us at contact@cyberfu.co.uk for anything privacy related, including the requests described under Your rights below.
Privacy by design. We treat privacy as a property of the thing itself, not a paragraph bolted on afterwards. In practice that means:
  • Privacy is the default. This website has no accounts, no cookies and no analytics or tracking scripts of any kind. If we do not need a piece of data to do the job, we do not take it.
  • It is built in, not added on. Where we build products, protection is part of the design. Our chat tool CFU Chat encrypts every message in your browser before anything leaves it; the server that hosts it cannot read what you write.
  • Plain language and openness. This page describes what we actually do. If you want to know more than it says, ask and we will tell you.
  • Few vendors, close to home. The services that carry your data are named on this page, and they sit in the UK or the European Economic Area. The one exception is a single image request, spelled out under Who else sees it.
  • Your data is yours. You can ask to see it, correct it or have it deleted, and we will act on it.
What we collect: this website. Only what you type into the contact form: your name, your email address and your message. Our hosting keeps the standard short-lived server logs every web server keeps, for security and troubleshooting. The contact page also loads one small image, a UK flag, from Wikimedia; as with any image request, Wikimedia's servers see the request that fetches it.
What we collect: email correspondence. If you email us, we keep your address, your name and the conversation, so we can have the conversation.
What we collect: consulting engagements. When you hire us, we necessarily work with information about your business and sometimes about your people: names, email addresses, access you grant us to your systems, and material that passes through them. We collect only what the job needs, we use it only for the job, and how we handle it is set out in the engagement agreement before work starts.
What we collect: our products.

prayertimes.tr (Turkish prayer times) is a static site. It has no accounts, no forms and no personal data. Its hosting keeps the same short-lived server logs as above.

CFU Chat (cfuchat.cyberfu.co.uk) runs entirely in your browser. Messages are encrypted on your device before they are shared anywhere, and we hold none of them. Its hosting keeps the same short-lived server logs.

What we never collect. We do not run advertising or tracking anywhere. We never sell, rent or share what you send us, and we never build profiles of visitors.
How we use it, and our legal bases.
  • Contact form messages: to answer your enquiry. Legal basis: legitimate interests.
  • Email correspondence: to have the conversation. Legal basis: legitimate interests.
  • Engagement material: to deliver the work you hired us for. Legal basis: contract.
  • Invoices and accounts: to meet our tax and accounting duties. Legal basis: legal obligation.
  • Server logs: to keep the services secure and working. Legal basis: legitimate interests.
We do not use your data for automated decision making or profiling, because we do not do either.
Who else sees it. Very few parties, and only to carry what you asked for:
  • Brevo (France) provides the email relay that carries contact form messages to our mailbox.
  • Soverin (Netherlands) hosts our mailboxes.
  • Naranja Tech (Spain) hosts the servers behind this website and our products.
  • Wikimedia (United States) serves the one small UK flag image on the contact page. Their servers see the request that fetches it, as with any image on the web, and nothing more.
All of these except the flag image sit in the United Kingdom or the European Economic Area. We do not pass your data to anyone else, unless the law compels us, and if that ever happens we will say so plainly.
How long we keep it.
  • Contact form messages and email conversations stay in the mailbox while the conversation is alive, and afterwards for reference. If you want everything we hold about you deleted, say the word and it goes.
  • Engagement material is kept for the duration of the work, and handed back or deleted at the end unless the engagement agreement says otherwise.
  • Invoices and accounts are kept for six years, as tax law requires.
  • Server logs are short-lived and rotate away on their own.
Your rights. Under UK GDPR you have the right to:
  • see the personal data we hold about you, and get a copy of it;
  • have it corrected if it is wrong;
  • have it erased;
  • restrict or object to our processing of it;
  • get it in a portable form so you can take it elsewhere.
To use any of these, email contact@cyberfu.co.uk. We will answer within the statutory timeframe and we will not make you jump through hoops. If you are in the EU, the EU GDPR gives you materially the same rights and we honour them in the same way.
Children. Our services are aimed at businesses and are not intended for children. We do not knowingly collect data from children, and if we ever receive any we will delete it.
Security. We keep the attack surface small on purpose: no accounts to breach on this site, no tracking scripts to go rogue, and credentials for client systems are handled per engagement and revoked when the work ends. No method of protection is perfect, but we would rather hold very little of yours than hold a lot of it behind a big promise.
Changes to this policy. If our practices change, this page changes with them. The date below always tells you which version you are reading. Last updated: 2026-09-20.
Contact. Cyberfu Ltd, Milton Keynes, United Kingdom. Email: contact@cyberfu.co.uk.