Privacy policy

Last updated 27 October 2026

Ey-aye is a trading name of Loftsoft Ltd ("we", "us"), registered in England and Wales, company no. [NUMBER], registered office [ADDRESS]. We are the data controller for the personal data described here. Questions go to paul@ey-aye.co.uk.

What we collect, and why

• Enquiries. When you use the contact form or email us, we collect your name, business name, email address and whatever you tell us. We use it to reply to you and, if you become a client, to do the work. Lawful basis: our legitimate interest in responding to enquiries, then the contract with you.
• Bookings. If you book a look-round through our booking tool, the tool's provider collects the details needed to make the appointment and shares them with us. Their privacy policy applies to their processing.
• Client work. If we build or configure something for your business, we may process personal data held in your systems (customers, bookings, invoices) on your behalf and under your instructions. For that data you are the controller and we are a processor, and our written agreement with you covers it.
• Website use. Our hosting provider (Cloudflare) keeps standard server logs, including IP addresses, for security and to keep the site running. We do not run analytics or advertising trackers on this site.

Who we share it with

Only the suppliers we need to run the business, each under their own data protection terms: our hosting provider (Cloudflare), our form provider (Web3Forms), our booking tool, our email provider, and our accountant for invoicing. We do not sell personal data and we do not use it to train AI models.

AI tools

We use AI services in our work. Where we do, we use business accounts whose terms exclude training on the data, and we do not put client or customer data into consumer AI tools. The same rule applies to anything we build for you.

How long we keep it

Enquiries for up to two years from the last contact. Client records for six years after the work ends, because tax law requires it. Server logs for a short rolling period set by the hosting provider.

Where it's stored

In the UK or EU where we can. Some suppliers process data in the United States under the UK's international data transfer rules.

Your rights

You can ask to see the personal data we hold about you, have it corrected or deleted, object to or restrict how we use it, and ask for a copy in a portable format. Email paul@ey-aye.co.uk and we'll reply within a month. If you're not happy with how we've handled something, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the date at the top changes with it.