Legal content requires review before production reliance.

Privacy notice

Last updated: 24 July 2026

This notice explains how Blue Signal Systems (“we”) handle personal data collected through https://bluesignalsystems.co.uk and related enquiry channels.

Controller

Craig Wilkinson, craig.wilkinson@bluesignalsystems.co.uk. Legal entity: [CRAIG TO CONFIRM: controller legal name / company number / registered office]

Data we collect

• Contact and enquiry details you submit (name, organisation, work email, phone if provided, situation description, help sought, timeframe)
• Technical data necessary to operate the site securely (for example IP address for rate limiting / abuse prevention)
• Turnstile challenge tokens for spam protection
• Cookieless analytics metrics when Cloudflare Web Analytics is enabled (not used to identify you via advertising cookies)

Purposes and lawful bases

• Responding to enquiries — steps prior to a contract and/or legitimate interests
• Security and abuse prevention — legitimate interests
• Optional marketing communications — only if separately offered and consented (not collected by default)

Submitting an enquiry is not framed as GDPR “consent” to process the enquiry itself; the privacy acknowledgement on the form confirms you have seen this notice.

Sharing

We use processors necessary to host the website and send email (for example Cloudflare and a transactional email provider such as Resend or Postmark). Enquiries are delivered by email; there is no enquiry database in the current architecture. We do not sell personal data.

Retention

Enquiry records are retained in the mailbox only as long as needed to respond and maintain reasonable business records. [CRAIG TO CONFIRM: retention periods]

Your rights

Under UK GDPR you may have rights of access, rectification, erasure, restriction, objection and complaint to the ICO. Contact craig.wilkinson@bluesignalsystems.co.uk.