Legal

Privacy Policy

We keep things simple. Here is exactly what data we collect, why, and what you can do about it.

Who we are

Swiftkraft Ltd is a software development studio registered in England and Wales. Our registered address is 66 Paul Street, London, EC2A 4NA. We are the data controller for any personal data collected through this website.

What data we collect

When you submit our contact form we collect your name, email address and project description, together with any project types, preferred development start and optional budget range you choose to provide. With your consent, we also collect usage data via Google Analytics (pages visited, time on site, approximate location), associated with a browser identifier. We do not use advertising trackers or share your data with third parties for marketing.

How we use it

We use your contact details solely to verify your email address, respond to your enquiry and, where relevant, follow up on a potential project. Unverified enquiries are held temporarily for up to 30 minutes and are not delivered to our team. We do not sell, rent, or share your data with third parties for marketing purposes.

Form security and service providers

Our contact form uses Cloudflare Turnstile to detect automated submissions, Upstash Redis to hold an unverified enquiry temporarily, and Resend to send the confirmation and enquiry emails. These providers process limited technical or enquiry data on our behalf for security and delivery purposes. To keep email confirmation working after a page refresh, we temporarily save a confirmation token and expiry time in your tab's session storage. The saved token can be reused for up to 30 minutes after opening the link; the link itself expires 30 minutes after your enquiry is submitted. The saved token is cleared after successful confirmation, when expiry is detected, or when the tab closes. This storage contains no enquiry details and is used for confirmation, not analytics.

Legal basis

Our lawful basis for processing your data is legitimate interests — specifically, responding to business enquiries you have chosen to send to us.

How long we keep it

We retain enquiry data for up to 24 months from the date of first contact, or until you ask us to delete it, whichever comes first. Data relating to a project engagement may be kept for up to 6 years for legal and accounting purposes.

Your rights

Under UK GDPR you have the right to access, correct, or delete the personal data we hold about you. You also have the right to restrict or object to processing, and to data portability. To exercise any of these rights, email us at projects@swiftkraft.tech. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies and analytics

This website uses Google Analytics (GA4) to understand how visitors use the site. Google Analytics sets cookies (_ga, _ga_*) to collect usage data such as pages visited, time on site, and general location, associated with a browser identifier. This data is processed by Google and is subject to Google's Privacy Policy. We only activate Google Analytics after you have given your consent via the cookie banner. Use Cookie settings at the bottom of any page to change your choice or withdraw consent. Withdrawing consent stops further analytics collection and removes accessible Google Analytics cookies for this site. We store your choice in your browser's local storage; if storage is unavailable, the choice applies to the current page session. Analytics stays off if you decline. The email confirmation page does not load analytics. With consent, we also count enquiries started, successful requests for a confirmation email, and confirmed enquiries. These events include only a fixed page category, such as iOS app development or MVP development; we do not send your name, email address, message, form selections or confirmation token to analytics. We keep the last consented service-page category in tab session storage for up to 30 minutes and attach it to the pending enquiry so it can be attributed when an email link opens in another tab. After confirmation, a token-free receipt is briefly saved in session storage and consumed on a separate thank-you page, only if analytics consent is still granted. The receipt expires after five minutes and contains only the page category and expiry time. Withdrawing consent clears this analytics storage in open tabs.

Changes to this policy

We may update this policy from time to time. The date at the bottom of this page reflects when it was last revised. Continued use of the site after an update constitutes acceptance of the revised policy.

Last updated: 4 October 2026  ·  Swiftkraft Ltd, 66 Paul Street, London, EC2A 4NA