Skip to main content

FLAT18.CO.UK Policy on User Privacy

This policy applies to all services, websites, apps, and projects directly provided by FLAT EIGHTEEN MICROSYSTEMS DEVELOPMENT LLC (FLAT 18), including testing, beta, and alpha releases, unless another data-handling policy exists and explicitly overrides this policy by declaration. This policy applies to site visitors worldwide.

This document does not cover third-party services or platforms that may interact with Flat18 systems. Each third party has its own privacy policies, which will apply independently. Where we recognise a conflict between our policy and a third party's policy, we may try to inform the user, but we cannot take responsibility for third-party policies.

Cookies and Trackers

We use privacy-focused analytics on our main site to understand aggregate traffic, page use, referral sources and contact actions. SignalMap, operated by Flat 18, records page views, anonymous session-level behaviour and named actions such as a form submission or an email click. We also use Umami for website analytics. These tools do not need a marketing cookie to record the basic event.

Live chat uses Chatwoot and may set an operational cookie so that a conversation works. We may also enable advertising-platform measurement tags for a campaign. On Flat18 projects, hosted, staged or otherwise executed codebases, we may set cookies for account and session management. Where a project needs them, we will explain the requirement.

When you start a live chat, we may attach an approximate IP-based location, such as your city, region and country, to the Chatwoot contact record. This is an estimate rather than a precise address and helps us understand where enquiries come from.

Data Collection and Usage

When you contact us, we collect the information you choose to provide so that we can respond to your enquiry. This may include:

  • Telegram Handle
  • Email Address
  • Company or Individual Name
  • Physical Address

When you use the website contact form, we may add an IP-based location and network insight to the enquiry to help us prevent abuse and understand where the request came from. This may include an approximate city or country, timezone, network and ASN. It is an estimate and does not identify a person by itself.

Our analytics are used to understand how the site performs, not to identify individual visitors. Analytics data may include browser type, referral URL, approximate location, anonymous session behaviour and the name of a contact action. We do not put form content, names or email addresses into analytics events.

Whenever personally identifiable data is stored on our servers, we will take every reasonable precaution to prevent security breaches or data leaks. It is not, and will never be, our policy to disclose any part of the organised data collected on individuals, whether anonymous or identifiable, to any third party. The only exception is a formal, documented request from police or legal authorities.

Data Retention and Deletion

Flat18 aims to retain user information for 2 years. Users may request the deletion of their data from our accountancy system and communications platform, provided they are not active clients. We will comply with such requests, ensuring that no other personally identifiable information is kept. However, we will retain records of IP addresses as part of our growing IP geolocation database, which helps us determine that a user has previously made contact with us.

Profiling and Analytics

We may use the aggregate analytics and IP-based insight described above to identify likely abuse, assess the quality of site traffic and decide whether an enquiry needs further verification. This does not automatically limit anyone's access to our services. We do not make automated decisions about a person based on this information.

Third-Party Payment Processors

We use third-party payment processors, such as Stripe and PayPal, for processing fiat-currency transactions. These processors have their own privacy policies, which apply when you visit their domains. It is the user's responsibility to research and understand these policies. We are limited in how we portray PayPal and Stripe on our payments pages.

User Rights and Requests

Users have the right to request deletion, modification, or access to their data. To make such a request, users should contact us from their registered contact method, such as their Telegram handle or email address. We will then verify their identity through follow-up communication, requesting details about their interactions with us, such as the value, currency, and date of their last payment to us. Once verified, we will process the request accordingly.

Security Measures

Flat18 is committed to protecting user data by employing industry-standard security measures. This includes the use of encryption, firewalls, secure access controls, and regular security audits. We ensure that all personal data is stored securely and that only authorised personnel have access to this information. Our security practices are regularly reviewed and updated to mitigate any potential risks and to comply with industry best practices.

Partially Updated: June 2024