This Privacy Policy explains how fabrik5 Ltd ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website, submit our contact form, or subscribe to our updates.
We are committed to protecting your privacy and processing your personal data transparently and lawfully in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable EU GDPR requirements where relevant.
1. Data Controller
fabrik5 Ltd71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
Company Registration Number: 16868900
Contact email: contact@fabrik5.com
2. Personal Data We Collect
2.1 Data you provide directly
- When you subscribe to updates: your email address.
- When you submit our contact form: your first name, last name, email address, and the content of your message (and any other information you choose to include in it).
2.2 Data collected automatically (hosting & security)
We do not use analytics, advertising, or marketing tracking tools, and we do not set non-essential cookies.
However, as with any website, limited technical data is processed to deliver and secure the site. Our hosting and content-delivery provider, Cloudflare, automatically processes technical information such as your IP address, browser and device type, and request metadata (date/time and pages requested) in server and security logs. This is used to serve the website, protect it against attacks (for example DDoS), and maintain availability. See Sections 4 and 5.
3. Purpose and Legal Basis for Processing
| Purpose | Data processed | Legal basis |
|---|---|---|
| Send you email updates, news, or announcements about fabrik5 | Email address | Consent (UK GDPR Art. 6(1)(a)) |
| Manage and maintain our email distribution list | Email address | Legitimate interests (maintaining our subscription list) |
| Respond to and manage enquiries you submit via our contact form | Name, email address, message | Consent, and/or legitimate interests in responding to enquiries you initiate; where your enquiry relates to our products or services, taking steps at your request prior to entering into a contract (Art. 6(1)(b)) |
| Host, deliver, and secure our website | Technical data (IP address, request metadata, security logs) | Legitimate interests (network and information security, site availability, and prevention of fraud or abuse) |
You may withdraw your consent at any time by clicking "unsubscribe" in any email or by contacting us at contact@fabrik5.com.
4. Service Providers (Data Processors)
4.1 HubSpot — email and contact-form management
We use HubSpot as our email communication, contact-form, and subscriber/contact management platform.
- When you subscribe or submit our contact form, the data you provide (your email address, and — for the form — your name and message) is stored and processed in HubSpot's systems. HubSpot acts as our data processor.
- Our contact form is provided through HubSpot; submitting it transfers your data to HubSpot so that we can store and respond to your enquiry.
- HubSpot may set cookies that are necessary for the form to function and to prevent spam (see Section 5).
- HubSpot may process data outside the UK or EU. Such transfers are protected by Standard Contractual Clauses (SCCs) together with HubSpot's Data Processing Agreement and security measures.
- You can view HubSpot's privacy practices here: https://legal.hubspot.com/privacy-policy
4.2 Cloudflare — hosting, content delivery, and security
Our website is hosted and delivered through Cloudflare (Cloudflare, Inc., including Cloudflare Pages). Cloudflare acts as our hosting, content-delivery, and security processor.
- Cloudflare processes technical data (such as IP address, request metadata, and security signals) in order to host, deliver, and protect the website, including DDoS mitigation and web application firewall functions.
- Cloudflare may set strictly necessary security cookies (for example to distinguish genuine visitors from bots — see Section 5).
- Cloudflare may process data on servers located outside the UK or EU; such transfers are protected by SCCs and supplementary security measures.
- You can view Cloudflare's privacy policy here: https://www.cloudflare.com/privacypolicy/
5. Cookies and Similar Technologies
We do not use analytics, advertising, or marketing cookies. The only cookies that may be set are strictly necessary cookies required to deliver and secure the website and to operate our contact form:
- Cloudflare may set security and bot-management cookies (for example
__cf_bm,cf_clearance). These are essential for protecting and delivering the site and do not require consent. - HubSpot may set cookies necessary for our contact form to function and to prevent spam when you use it.
If we introduce analytics or other non-essential cookies in the future, we will ask for your consent, provide appropriate controls, and update this policy accordingly.
6. Data Sharing
We do not sell or rent your personal data. We share data only with:
- HubSpot (email delivery, contact form, and subscriber/contact management)
- Cloudflare (website hosting, content delivery, and security)
- Other service providers required to operate the website
- Regulatory or legal authorities where required by law
All processors are bound by contractual obligations (data processing agreements) to protect your data.
7. Data Retention
- Newsletter email address: kept until you unsubscribe, or until we determine that the mailing list is inactive.
- Contact-form submissions: kept for as long as necessary to handle your enquiry and for a reasonable period afterwards for our business records, after which they are deleted or anonymised.
- Server and security logs: retained by Cloudflare for a limited period in line with its standard retention practices.
After you unsubscribe, your data will be deleted or anonymised within a reasonable timeframe.
8. Your Rights
Under the UK GDPR and EU GDPR, you have the following rights:
- Right to access your personal data
- Right to rectify inaccurate data
- Right to erase your data ("right to be forgotten")
- Right to restrict processing
- Right to withdraw consent at any time
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
UK supervisory authority: Information Commissioner's Office (ICO) — www.ico.org.uk
If you are in the EU, you may contact your local data protection authority.
9. International Data Transfers
Because HubSpot and Cloudflare may process data outside the UK or EU, your data may be transferred internationally. These transfers are protected by:
- Standard Contractual Clauses (SCCs)
- Supplementary security measures required by UK GDPR
10. Security
We take appropriate technical and organisational measures to protect your personal data, including:
- Secure hosting
- Access controls
- Encryption where appropriate
- Data minimisation
However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our website is not intended for children under 16, and we do not knowingly collect data from them.
12. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page. If changes are significant, we will notify subscribers via email.
13. Contact Us
If you have questions about this Privacy Policy or how your data is handled, please contact us at: contact@fabrik5.com
← Back to home