Privacy notice

This notice explains what personal data we collect when you use modernphp.co.uk, why we collect it, how long we keep it and what your rights are. We keep it short because we collect very little.

Who we are

The data controller is ModernPHP, a PHP upgrade consultancy based in the United Kingdom. For anything about your data, email [email protected].

What we collect

When you send an enquiry through the contact form, we collect:

• your name, agency or company name and email address
• the service you’re interested in, your approximate codebase size and current PHP version
• anything you choose to write in the message field
• technical details used to stop spam and abuse: a one-way scrambled (hashed) version of your IP address and your browser’s user-agent string

When you email us, we receive your email address and whatever you include in your message.

When you browse the site, our servers and our security provider (Cloudflare) process standard request data such as your IP address to deliver pages and protect the site from attacks. We don’t use analytics, advertising or tracking tools.

Why we use it, and our lawful basis

• To reply to your enquiry and, if you ask, prepare a quote or proposal. This is necessary to take steps at your request before entering into a contract, and is in our legitimate interest in responding to business enquiries.
• To keep the site and form secure, for example by limiting repeated submissions. This is in our legitimate interest in protecting our systems.

We will never sell your data, add you to a mailing list or send you marketing without your permission.

Who we share it with

We use a small number of trusted providers who process data on our behalf, only to run this site and our email:

• Our cloud hosting provider, which hosts the website and the database where enquiries are stored
• Cloudflare, which delivers and secures the website and forwards email sent to our address
• Resend, which delivers the notification email we receive when you submit the form
• Our email provider, where enquiry emails and our replies are stored

Some of these providers are based in, or may process data in, the United States. Where that happens, the transfer is protected by the UK–US data bridge or by the UK’s approved contractual safeguards.

Cookies

We set one cookie, mphp_sid, which keeps the contact form secure against forged submissions. It is strictly necessary, contains no personal information and is deleted when you close your browser. Cloudflare may set strictly necessary security cookies to tell people from bots. If you switch between light and dark mode, your browser remembers that choice locally; it is never sent to us. Because we only use strictly necessary storage, we don’t need to ask for cookie consent.

How long we keep it

We keep enquiries for up to 24 months after our last contact, then delete them. If you become a client, we keep the records we need for the contract and for tax and accounting purposes (normally six years).

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct or delete it
• object to, or ask us to restrict, how we use it
• ask for your data in a portable format

To use any of these rights, email [email protected]. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Security

The site is served only over encrypted HTTPS connections. Enquiries are stored in a database that isn’t reachable from the internet, and access to our systems is restricted to us.

Changes to this notice

If we change how we use personal data, we’ll update this page and the date at the top.