Last updated 16 August 2026. This policy explains what personal data SURFACED handles and why.
SURFACED is the data controller for personal data collected through this site and our services. We operate remotely and have no public office address at present; contact us at contact@mysurfaced.com.
We don't sell your data, rent contact lists, or add you to marketing emails you didn't ask for.
This site is static and does not set advertising or tracking cookies. If we add analytics in future, we'll use a privacy-friendly, cookieless option and update this policy.
We use standard business tools for email, documents, scheduling and hosting. These providers process data on our instructions under their own data protection terms. Some may process data outside the UK/EEA under appropriate safeguards.
Enquiry data is kept for up to 24 months after our last contact. Client records are kept for as long as required for legal and accounting purposes, typically six years.
Under UK GDPR you can request access to your data, correction, deletion, restriction or portability, and you can object to processing based on legitimate interests. Email contact@mysurfaced.com and we'll respond within one month. You may also complain to the Information Commissioner's Office.
We limit access to personal data to those who need it, use reputable providers with encryption in transit, and delete data we no longer need.
We'll update this page when our practices change and revise the date above. See also our terms of use.
Free audit, 48-hour turnaround. No commitment.