Legal
Privacy Policy
This notice explains what EKSTRUH LTD does with personal information submitted through ekstruh.dev, and the rights available to you.
Who is responsible for your information
EKSTRUH LTD is responsible for personal information handled through this website. EKSTRUH is the software development brand operated by EKSTRUH LTD, and ekstruh.dev is that brand's website.
In data protection terms, EKSTRUH LTD is the controller for the information described in this notice.
If you have a question about privacy, or want to exercise any of the rights described below, email info@ekstruh.dev.
We have not appointed a Data Protection Officer. The address above is our general business address and reaches the people who handle enquiries.
Information we collect
This website does not require an account and has no login. The only routine way we collect personal information is when you choose to send it to us.
Through the contact form
The contact form asks for:
- Name — required, so we know who we are replying to.
- Email address — required, so we can reply.
- Company or organisation — optional.
- Enquiry type — required; a choice from a fixed list, so the enquiry reaches the right context.
- Project or application details — required; whatever you choose to tell us about the work.
- Technical context — optional; framework versions, hosting and similar background.
The free-text fields are yours to fill in as you see fit, so they contain whatever you decide to include. Please see the section below on information you should not send us.
By email
If you write to info@ekstruh.dev directly, we receive your email address, your name as it appears on the message, and anything else in the message or its attachments.
Technical information
Like almost all websites, the hosting infrastructure that serves ekstruh.dev may record standard server information such as IP address, request time and the page requested. This is generated by the hosting layer rather than by anything we have added to the site, and we do not use it to build profiles of visitors.
We do not collect: user accounts or profiles, payment card details, passwords for any service we operate, precise location data, marketing profiles, advertising identifiers or analytics identifiers. Those features are not implemented on this website.
Information you should not send us
The contact form is an ordinary public web form. Please do not use it to send:
- passwords or access credentials of any kind;
- API keys, tokens, certificates or connection strings;
- sensitive production data, including real customer records;
- special category information such as health data;
- anything confidential that does not need to be in a first enquiry.
Tell us what the problem is rather than handing over the keys to the system. If a project needs access to credentials or live data later, that is arranged separately through an appropriate channel, not through this form.
Why we use your information
We use the information you send for these purposes:
- replying to your enquiry;
- understanding the software or development work you are asking about;
- discussing whether and how we could help, including scope and approach;
- handling the correspondence that follows from an enquiry;
- keeping appropriate business records of enquiries and the discussions arising from them;
- operating and protecting the contact mechanism against spam, automated submission and other misuse;
- meeting legal or regulatory obligations where they apply.
We do not operate a newsletter or marketing list, and we do not use enquiry details to build marketing profiles or to advertise to you.
Our lawful basis for using it
UK data protection law requires a lawful basis for each purpose. Which one applies depends on what your enquiry is actually about, so we do not claim a single basis covers everything.
Steps before a contract
Where your enquiry concerns work you are asking us to consider — scoping a project, discussing an upgrade, exploring an engagement — processing your information may be necessary to take steps at your request before entering into a contract.
Legitimate interests
For general business enquiry handling, ordinary correspondence and protecting the contact form, we may rely on legitimate interests. We describe those interests narrowly:
- responding to business enquiries that have been sent to us;
- communicating with people about services they have asked about;
- operating the enquiry mechanism and protecting it from abuse;
- keeping appropriate records of business correspondence.
Where we rely on legitimate interests, we consider whether our interest is overridden by your interests and rights. You can object to this processing — see your rights below.
Legal obligation
Where the law requires us to retain or disclose information, we rely on legal obligation.
Consent
We do not ask you to tick a consent box to send an ordinary enquiry, and we do not treat submitting the form as consent to marketing. If we ever rely on consent for a specific purpose, we will ask for it separately and you will be able to withdraw it. The privacy-choice cookie described in the Cookie Policy records a device choice about optional website storage. It is not consent to marketing, and it is not how we justify handling an enquiry.
Who we share information with
We do not sell personal information, and we do not share it for advertising or ad-targeting purposes.
We cannot honestly say your information never reaches anyone else, because running a website and an email address involves service providers. In practice information may be processed by:
- Hosting and infrastructure providers that operate the servers on which this website and its contact handler run;
- Email and communication providers involved in delivering, storing and letting us read the enquiry and any reply.
These providers process information so that we can deliver the service you have asked for. They are not permitted to use enquiry content for their own marketing purposes.
In addition, information may be disclosed in specific circumstances that have not arisen as a matter of routine:
- to professional advisers, such as legal or accounting advisers, where necessary;
- to public authorities, regulators or law enforcement where disclosure is legally required;
- in connection with the sale or reorganisation of the business, where permitted by law.
Where your information is processed
Enquiries are handled by people working in the United Kingdom.
This website is hosted on infrastructure provided by Namecheap, which acts as a processor for the hosting of the site and the handling of enquiry email. The specific data centre region and the countries in which that provider processes information are still being confirmed against the purchased service, so this notice does not claim that all information stays within the UK.
Where personal information is transferred outside the UK, that transfer must be covered by an appropriate safeguard recognised under UK data protection law. We will set out the arrangements here once the providers and their processing locations are confirmed.
How long we keep it
We keep enquiry and related correspondence only for as long as is reasonably necessary for the purpose it was collected for, including handling the enquiry, maintaining appropriate business records and meeting applicable legal obligations.
How long that is in practice depends on:
- whether the enquiry leads to a working relationship;
- the nature and subject of the correspondence;
- any legal, accounting or record-keeping requirements that apply.
An enquiry that goes nowhere does not need to be kept as long as correspondence connected to actual work. We would rather describe this honestly than publish a fixed number that does not reflect how records are really handled.
You can ask us to delete correspondence — see your rights below.
How we protect it
We take reasonable technical and organisational measures to protect information submitted through this website. The contact form validates and cleans submissions on the server, protects against cross-site request forgery, limits how frequently it can be used, filters automated submissions, escapes anything redisplayed on the page, and sends to a single fixed address that cannot be altered by what someone types into the form.
Please submit the form over an https:// connection so that it is encrypted in transit.
No website or email system can be guaranteed completely secure, and we do not claim otherwise. Email in particular is not a secure channel for confidential material, which is why we ask you not to send credentials or production data through the form.
Cookies and website storage
This website does not use analytics, advertising or tracking cookies. The contact page sets one strictly necessary first-party session cookie so that its security protections work. If you make a privacy choice, the site also stores a strictly necessary first-party preference cookie on your device for 182 days so that choice is remembered. If that cookie cannot be stored, the same choice is kept in session storage for the current tab only. It is not an account or advertising identifier.
Full details, including how to change that choice, are in our Cookie Policy.
Automated decision-making
We do not use information submitted through this website to make automated decisions that produce legal effects or similarly significant effects for you. Enquiries are read and answered by people.
Children
This is a business website. Its content and the contact form are intended for business and service enquiries, and are not directed at children.
Your rights
UK data protection law gives you a number of rights over your personal information:
- Access — ask for a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate or incomplete.
- Erasure — ask us to delete information where there is no good reason for us to keep it.
- Restriction — ask us to limit how we use information in certain circumstances.
- Objection — object to processing carried out on the basis of legitimate interests.
- Portability — in some circumstances, receive certain information in a portable format.
- Withdrawing consent — where processing actually relies on consent, withdraw it at any time.
These rights apply in different circumstances, and not every right applies to every activity. For example, the right to erasure does not apply where we are required to keep something by law, and portability applies only to certain processing. We will explain our reasoning if we cannot do what you have asked.
To exercise any of these rights, email info@ekstruh.dev. There is normally no charge, and we aim to deal with requests within the period required by law.
Complaints
If you are concerned about how we have handled your personal information, please tell us first so we have the chance to put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:
Information Commissioner’s Office (ico.org.uk) (opens in a new tab)
Changes to this notice
We may update this notice as the website changes or as our processes develop. The date at the top shows when it was last substantively updated. It is not changed automatically when the site is rebuilt.
If we make a significant change to how we use personal information, we will make that clear here.
Have a Software Project in Mind?
Whether you're building something new, modernising an existing application or need specialist development support, let's discuss what you need.