Home
> Privacy Policy

Privacy Policy

Last updated: 28 February 2026

Who we are

Sunsetia Digital Ltd is a limited company based in Cornwall, UK. We provide virtual assistant services and bespoke web development. In this policy, "we", "us", and "our" refers to Sunsetia Digital Ltd.

You can contact us via the contact form on our website.

What data we collect and why

We only collect personal data that you voluntarily provide to us through our contact form. This includes:

  • Name — so we know who we're speaking with
  • Email address — so we can respond to your enquiry
  • Message content — to understand your needs and respond appropriately

We use this information solely to respond to your enquiry and, where relevant, to provide the services you've requested. We do not use your data for marketing without your explicit consent.

Legal basis for processing

Under UK GDPR, we process your personal data on the basis of legitimate interests — specifically, to respond to enquiries from prospective and existing clients. Where we enter into a service agreement with you, processing is also necessary for the performance of a contract.

Third-party services

Our contact form is protected by Google reCAPTCHA v3 to prevent spam. By submitting the form, your interaction data may be sent to Google for analysis. Google's use of this data is governed by Google's Privacy Policy.

We use a third-party email service provider (Gmail/Google Workspace) to receive and send emails. Messages you send us may pass through Google's servers.

We do not sell, rent, or share your personal data with any other third parties.

Cookies

Our website uses a small number of cookies that are strictly necessary for it to function:

  • Session cookie — maintains your session while browsing (expires when you close your browser)
  • CSRF token — protects form submissions from cross-site attacks (security, not tracking)

Google reCAPTCHA may also set cookies when you interact with the contact form. These are governed by Google's Cookie Policy.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies beyond those described above.

How long we keep your data

We retain enquiry data for as long as is reasonably necessary to respond to and follow up on your enquiry, or for the duration of any service agreement, plus a reasonable period thereafter for record-keeping purposes. We do not retain personal data beyond what is necessary.

Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access — you can request a copy of the data we hold about you
  • Right to rectification — you can ask us to correct inaccurate data
  • Right to erasure — you can ask us to delete your data, subject to legal obligations
  • Right to restriction — you can ask us to limit how we use your data
  • Right to object — you can object to processing based on legitimate interests
  • Right to data portability — you can request your data in a portable format

To exercise any of these rights, please contact us via the contact form. We will respond within 30 days.

Right to complain

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection authority.

Changes to this policy

We may update this policy from time to time. The date at the top of the page will always reflect the most recent revision. We encourage you to review it periodically.