Privacy Notice

1. Who is responsible

The controller is DIFFLS LTD (company number 16285040), registered in England and Wales. Registered office: Office 5889, 58 Peregrine Road, Ilford, England IG6 3SZ.

The way to reach us about privacy is hello@diffls.com.

2. Information you send us

You can contact Diffls by WhatsApp, through the website enquiry form, by email, or by phone. When you do, you may send your name, business name, contact details, your message, and any follow-up correspondence. The enquiry form also asks how you would like a reply: WhatsApp, email or phone.

We use this to reply to you, discuss the services you asked about, and take steps toward a business contract if you decide to go ahead. We also keep necessary business correspondence afterwards.

The enquiry form sends your message by email. It is not saved into a database. Email becomes the working record.

If you message Diffls on WhatsApp, your message and your WhatsApp account and contact information are also processed by WhatsApp and Meta under their own terms and privacy policy. Diffls does not control that processing. Linking to WhatsApp from this site loads nothing from Meta and sets no cookies here.

3. Technical request data

Like almost every website, the hosting and security infrastructure behind diffls.com necessarily processes ordinary request information such as IP address, browser type, timestamps, and basic security metadata. This is used to deliver the site and keep it secure. Diffls does not build behavioural profiles from it.

The contact form also uses Cloudflare Turnstile to reduce automated abuse. Turnstile runs the browser and security checks needed to distinguish genuine visitors from automated traffic, and Cloudflare processes the technical data needed to provide that security function. Your name, contact details and message are not sent to Turnstile; they go only with the enquiry itself. The form page loads the Turnstile script from Cloudflare for this purpose.

4. If you become a customer

Project records may then also include:

• project correspondence and agreed requirements,
• invoices and payment records,
• business assets you supply, such as logos, photos and copy.

These are used to deliver the project, keep proper business and tax records, and handle any later questions about the work.

5. Finding new customers

Diffls may identify local businesses that could plausibly benefit from a website, using publicly available business information such as business websites, directories, public company registers, and public business listings.

The information involved is normally limited to:

• company or business name, and public website,
• public business email or telephone number,
• the name or role of a business contact where it is publicly shown,
• brief notes on whether the business appears to have a website and what might be relevant,
• outreach history and opt-out status.

Where the law allows, Diffls may rely on legitimate interests for proportionate, targeted business-to-business outreach. That does not automatically make every campaign lawful. Diffls keeps outreach narrow and personal, identifies itself clearly, includes an easy way to opt out, and complies with the electronic-marketing rules that apply to each recipient. Businesses run by individuals are treated with extra care where consent rules are stricter.

You can object to direct marketing at any time by replying to the message or emailing hello@diffls.com. Opt-outs are honoured promptly, and the minimum suppression details are kept so you are not contacted again.

6. How long we keep things

• General enquiries that go nowhere: up to 12 months after the last meaningful contact, unless a dispute or legal reason needs longer.
• Prospecting records with no engagement: normally reviewed or deleted within 12 months.
• Opt-out and suppression details: kept for longer where needed, in the smallest form that still respects the opt-out.
• Customer, contract and accounting records: up to 6 years where reasonably needed for tax, accounting or legal recordkeeping.

These are working maximums, not promises to delete where the law requires retention.

7. Who else sees your information

Information may pass through a small number of providers:

• hosting, security and contact-form infrastructure (currently Cloudflare),
• email and mailbox providers that carry correspondence,
• professional advisers or accountants, where genuinely necessary.

Diffls does not sell personal data.

8. International transfers

Some infrastructure providers may process data outside the UK. Where that happens, Diffls relies on the protections required by applicable data-protection law.

9. Your rights

Under UK data-protection law you have rights including:

• to ask for a copy of your data (access),
• to ask for mistakes to be corrected,
• to ask for deletion where it applies,
• to ask for processing to be restricted,
• to object, including an absolute right to object to direct marketing,
• to data portability where it applies,
• to withdraw consent where consent was the basis (rare here, since most processing relies on contract steps or legitimate interests).

To use any of these, email hello@diffls.com. You do not need to use formal language. We may need to verify who you are first.

10. Complaints to the ICO

If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk. It helps to contact Diffls first so there is a chance to put things right.

11. Changes and contact

If this notice changes materially, the updated version will replace this page with a new date above. For anything privacy-related, email hello@diffls.com or call 07359 932868.