Privacy notice

A test website. Fernbrook Test Heating is a fictional business used to test a website template, so this notice describes the website, not a real business.

This notice explains what personal information we collect through this website, why, what we do with it, how long we keep it, and your rights. If anything is unclear, contact us using the details below.

The short version

We use your information to run this website and to deal with what you ask us for. The details for each part of the website are below.
We don't sell your information.
We don't use advertising, tracking or visitor statistics cookies.
You can ask to see, correct or delete your information, and you can complain to us or to the Information Commission (the ICO).

Who we are

This website is run by Fernbrook Test Heating Ltd, trading as Fernbrook Test Heating ("we", "us"). We decide how and why your personal information is used, so we are its "controller" under UK data protection law. Fernbrook Test Heating Ltd is registered in England and Wales under number 00000000. Our registered office is 1 Test Row, Fernbrook, FB1 0AA.

Address: 1 Test Row, Fernbrook, FB1 0AA
Email or phone for privacy questions and requests: fernbrook-test@spanjiweb.co.uk
ICO registration number: ZA000000

What we collect and why

When you visit the website

What: technical information that every website receives: your IP address, browser and device type, the pages you request, and the date and time.
Why: to show you the website and keep it secure, for example to block attacks and abuse.
Lawful basis: our legitimate interests in running a working, secure website.
Who handles it: our hosting provider, Cloudflare, through the account of Balavon Studios LTD, who builds and hosts the website for us.
How long: the website itself keeps no record of your visit. Cloudflare keeps records of requests, with IP addresses, in the traffic and security reports of Balavon Studios LTD's account for 31 days; otherwise only as long as it needs to deliver and protect the website, under its data processing terms with Balavon Studios LTD.

When you send us an enquiry

What: what your enquiry is about, your name, your phone number, your email address and your message, and the details of the job you'd like a quote for.
Why: to reply to you and, if you ask, to give you a quote or arrange our services.
Lawful basis: taking steps you've asked for before entering into a contract, or our legitimate interests in responding to people who contact us.
Who handles it: the form sends your message through Cloudflare's email service, in Balavon Studios LTD's account, to our email inbox at Microsoft 365. The form itself stores nothing: Cloudflare's systems keep your IP address for about a minute, to stop the form being flooded, and a count of the day's messages, with no details of who sent them. Cloudflare's email service keeps a log of each message it delivers (who it went to, its subject and when) for 31 days, and may keep a copy of the message for about 7 days, to show it was delivered.
How long: 12 months after our last contact. If you become a customer, we keep what we need for that relationship, and the records the law requires, for as long as the law requires.

Spam protection on our forms

To stop our forms being used for spam, they're checked by Cloudflare Turnstile. It looks at signals from your browser and device, such as your IP address and browser details, to tell people from automated programs, and stores an item in your browser for the check (our cookies page says more). We do this under our legitimate interests in keeping the forms free of abuse. Cloudflare also uses these signals to improve its bot detection, as an independent controller under its own Turnstile privacy notice.

Reporting a security problem

If you report a security problem through our security page, your report (and the name and email address, if you give them) goes to Balavon Studios LTD, who looks after the website's security for us, so they can fix the problem and reply. It is kept only as long as that takes.

When you contact us another way

If you email or phone us directly, we use your details to reply, on the same basis and for the same time as an enquiry.

We use these organisations to run the website and receive your messages. A "processor" handles your information only on our behalf and under our instructions; a "controller" also decides some uses itself, and its own privacy notice covers those uses.

Balavon Studios LTD: builds, hosts and looks after this website for us, through its accounts with the suppliers below, and acts only on our instructions (a processor).
Cloudflare: hosts the website and keeps it secure, and delivers the form's messages, as a processor; for spam checks it is also a controller, as described above.
GitHub: stores the website's files, including any names and photos shown on it, under its own terms.
Anthropic: provides the AI assistant Balavon Studios LTD uses to build and update the website, which may see what the website shows, under its own terms.
Microsoft 365: our email service, where your messages arrive and are kept, under its terms with us.

We may also share information when the law requires it, or to protect our rights or someone's safety. If we sell or restructure our business, your information may pass to the new owner, who must use it in line with data protection law.

Information sent outside the UK

Some of the providers above store or handle information outside the UK, mainly in the United States. Where they do, the transfer is protected in one of these ways:

the country has UK "adequacy" status;
the provider is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge");
the provider has signed the UK's approved contract terms (the International Data Transfer Agreement or Addendum).

You can ask us for details.

How we keep it secure

The website only works over an encrypted connection (HTTPS).
Only the people who need your information to do their job can see it.
The accounts that run the website are protected with two-step sign-in.

No website or email system is completely secure, but we use these measures to protect your information.

Your rights

You have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct information that's wrong or incomplete;
ask us to delete your information;
ask us to restrict how we use it;
object to our use of it where we rely on legitimate interests, and always to direct marketing;
ask for your information in a portable format, where we rely on consent or a contract and handle it automatically;
withdraw your consent at any time, where we rely on it. This doesn't affect anything we did before you withdrew it.

We don't make decisions about you based solely on automated processing.

To use any of these rights, contact us at fernbrook-test@spanjiweb.co.uk. It's free in most cases. We'll respond within one month, or tell you within that month if we need longer (up to two more months for complex requests). We may need to confirm who you are first.

Complaints

If you're unhappy with how we've handled your information, please tell us first at fernbrook-test@spanjiweb.co.uk. We'll acknowledge your complaint within 30 days, look into it, and keep you told of progress and the outcome.

You can also complain to the Information Commission, the UK's data protection regulator (still known as the ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.

Do you have to give us your information?

No, but if you don't give us a way to reply, we can't answer your enquiry.

Children

Our services are for adults, and this website isn't designed for children. If you're under 18, please ask a parent or carer to contact us for you. If you think a child has given us information through this website, contact us at fernbrook-test@spanjiweb.co.uk and we'll deal with it.

Changes to this notice

We'll update this notice if what we do with personal information changes. The date at the bottom shows when it last changed.

Last updated 10 November 2026.