Privacy Policy

1. Information We Collect

We collect information that you provide directly to us and information that is collected automatically when you use our services.

Information You Provide

• Contact information (name, email address) when you submit our contact form or book a discovery call
• Chat conversation content when you use our AI assistant widget
• Lead capture information (name, email, message) when you share your details through the chat widget
• Email address when you subscribe to our newsletter
• Any additional information you choose to provide in messages or enquiries

Information Collected Automatically

• Device information (browser type, operating system, device type)
• Usage data (pages visited, time spent, referral source) via Google Analytics
• Log data (IP address, access times, pages viewed)
• Cookie and local storage data (cookie consent preferences)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide customer support
• To deliver our SaaS products (Noteble, SystemDox, Scrubber, PropertyHaven)
• To provide consulting, architecture, and website development services
• To send you newsletters and product updates (with your consent)
• To improve our website, products, and services
• To analyse website usage and optimise user experience
• To protect against fraud and abuse (via Cloudflare Turnstile)
• To comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share your information with the following categories of service providers:

• Amazon Web Services (AWS) — cloud infrastructure hosting in eu-west-2 (London)
• Google Analytics — website analytics (with IP anonymisation enabled)
• Cloudflare — bot protection and security (Turnstile CAPTCHA)
• Calendly — appointment scheduling when you book a discovery call
• We may disclose your information if required to do so by law or in response to valid legal requests
• In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

• All data is hosted on AWS eu-west-2 (London) with encryption at rest and in transit
• HTTPS encryption for all website traffic
• Access controls and authentication for all backend systems
• Regular security reviews and updates

While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions and chat conversations: 12 months after your last interaction
• Newsletter subscriptions: until you unsubscribe
• Analytics data: 26 months (Google Analytics default retention period)

6. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to our processing of your personal data

To exercise any of these rights, please contact us at legal@puglieseweb.com. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies on our website:

• Essential cookies — required for the website to function (cookie consent preference stored in localStorage)
• Analytics cookies — Google Analytics tracking (only loaded after you accept cookies, with IP anonymisation enabled)
• Third-party cookies — Cloudflare Turnstile for bot protection on our contact form

You can manage your cookie preferences using the cookie consent banner displayed when you first visit our website. For more details, see our Cookie Policy. Cookie Policy.

8. Third-Party Services

Our website integrates with third-party services that may collect information about you. Each service has its own privacy policy:

We use the following third-party services:

• Amazon Web Services (AWS) — cloud hosting and infrastructure
• Google Analytics — website usage analytics with IP anonymisation
• Cloudflare Turnstile — CAPTCHA and bot protection
• Calendly — appointment scheduling for discovery calls

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.

10. International Transfers

Your personal data is primarily stored and processed within the United Kingdom (AWS eu-west-2, London). Some third-party services (Google Analytics, Calendly) may process data outside the UK.

Where data is transferred internationally, we ensure appropriate safeguards are in place, including UK GDPR adequacy decisions and standard contractual clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: