Privacy Policy
The short version: we collect the minimum we need to run reviews and deliver services, we never sell your data, we use no advertising trackers, and you can ask us to delete everything at any time.
1. Who we are
VIPFish is operated by Andy Jones ("we", "us"), trading as VIPFish, a sole trader established in the United Kingdom. Andy Jones is the data controller for personal data collected through this website (vipfish.ai) and through our services.
Address for service: 39 Parc Gellifaelog, Tonypandy, CF40 1DU, United Kingdom
2. What we collect and why
| Data | When | Why (lawful basis) |
|---|---|---|
| Name, email, business name | When you book a review or contact us | To deliver the service you asked for (contract) |
| Booking details | Via Calendly when you schedule a call | To run your appointment (contract) |
| Billing details | When you buy a service | To raise your invoice and reconcile the bank transfer you send (contract) |
| Materials you share for a review | During an engagement | To perform the review you commissioned (contract) |
| Basic technical logs | Automatically on our hosting | Security and abuse prevention (legitimate interest) |
This site uses no cookies and no third-party advertising trackers. Our conversion measurement is consent-safe: it records anonymous button-click events only, in your browser, with no cookies and no third-party calls.
3. Payments
We invoice you and you pay by bank transfer. We do not take card payments and we never ask for card details. We see the billing details you give us for the invoice, and the payer name and reference that your bank includes with the transfer, which we use only to reconcile the payment. We keep payment records for six years, as UK tax law requires.
4. Who we share data with
- Our bank — to receive and reconcile your payment.
- Calendly — appointment scheduling, if you book a call.
- Our hosting providers — who store data on our behalf under contract.
We do not sell, rent, or trade your personal data. We do not share review findings with anyone but you. If the law compels disclosure, we will tell you unless legally prohibited.
5. How long we keep it
- Enquiry and booking data — up to 12 months after last contact.
- Engagement materials and deliverables — for the length of the engagement plus 90 days, unless you ask us to keep or delete them sooner.
- Payment and invoicing records — 6 years, as required by UK tax law.
6. Your rights
Under UK GDPR you can ask us to access, correct, delete, restrict, or export your personal data, and you can object to processing based on legitimate interest. Email hello@vipfish.ai and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO).
7. Security
All traffic to this site is encrypted (HTTPS with HSTS). Engagement materials are stored with access limited to the reviewer working on your engagement. Evidence deliverables are integrity-sealed with SHA-256 hashes so you can verify they have not been altered.
8. International transfers
Our processors (Calendly, hosting) may process data outside the UK. Where they do, transfers are protected by UK-approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
9. Changes to this policy
If we make material changes we will update the date at the top of this page. Significant changes affecting active clients will be notified by email.