Privacy Policy

SellLikeLocal LTD is the controller of the personal data described here. It decides why the data is held and what is done with it, and it is the company to write to about any of it.

There is no data protection officer: a company of this kind is not required to appoint one. Questions about data go to the address above and are answered by whoever does the work.

It governs the pages of this website and everything that follows from writing to us: an enquiry, a quotation, a project and the files that travel with it.

The website itself is a set of static pages. There is no account to open, no basket, no checkout and no upload. The review request form sends nothing on its own: it writes your answers out as text, hands that text to the email programme on your device and leaves a copy on the page for you to take. What reaches us is an ordinary email that you sent, in your own name, through your own provider.

Where a page here links to somewhere else, that site has its own notice and this one does not cover it.

• What you write. Your name, the email address you write from, the company you write on behalf of, and whatever else you decide to put in the message.
• The answers in a review request. If you use the form, the text it builds is a description of the work: the kind of product, the source language, the target languages and markets, roughly how many screens are involved, the format of the language files, where the designs are, which services you want, when you need it and anything you add at the end. It becomes the body of the email you send.
• Material for a project. Designs, resource files, screenshots and notes about context, sent as attachments or as a link to wherever they live.
• Records of a project that goes ahead. The quotation, the order confirmation, the correspondence, the delivered files, the invoice and the record that it was paid.
• Server logs. The hosting provider records what any web server records when a page is requested: the IP address the request came from, the date and time, the page asked for, the browser's user-agent string and the page that referred it.

Nothing else is collected. No profile is built about a visitor, no advertising or analytics service runs on these pages, and nothing you do while reading is recorded beyond those server logs.

Please keep special category data out of what you send. Nothing this company does needs health data, biometric data, or anything about a person's beliefs, politics, union membership, sex life or ethnic origin, and there is no reason for any of it to be in a resource file or a design.

Resource files and designs are project material rather than personal data, but personal data hides inside them more often than people expect: a test account called after a real person, an email address baked into a screenshot, a colleague's name in a comment on a design, a support address inside an error message.

Where that happens, the client who sent the material stays the controller of it and we handle it for them, under the project agreement and on their instructions. It is used only for the work it was sent for, it is not copied anywhere it does not need to be, and it goes when the project records go. If a file can be sent with real details replaced by invented ones without harming the work, that is the better way to send it.

• To read an enquiry, answer it, and put together a written quotation.
• To carry out an agreed project: translating strings, working through what the translated text does to the designs, checking built screens, and delivering the files.
• To keep a record of what was agreed, so that a question about a decision six months old has an answer.
• To raise invoices, take payment and keep the accounting records the law requires.
• To keep this website available, and to see what went wrong when something does.
• To deal with a complaint, and to bring or defend a legal claim if it comes to that.

• A contract, or the steps before one - Article 6(1)(b). Answering an enquiry, preparing a quotation, carrying out a project and delivering the files. Without this data there is nothing to quote for and no way to deliver.
• Legitimate interests - Article 6(1)(f). Keeping the record of correspondence so that what was agreed can be checked; keeping the site available and secure; and being able to bring or defend a claim within the period the Limitation Act 1980 allows. The interest is being able to run the business and account for it, and it is weighed against the fact that the data is ordinary business contact detail rather than anything sensitive.
• A legal obligation - Article 6(1)(c). Keeping accounting records and tax records for the periods that company law and tax law set.

Where the basis is legitimate interests, you can object to the processing, and we will stop unless there are grounds that override the objection or the data is needed for a legal claim.

No law obliges you to give us anything, and nothing on this website has to be filled in to read it. There is no account, no registration and no wall.

What follows from giving nothing is practical rather than legal. Without an address to reply to there is no reply. Without something about the product, the screens and the languages there is nothing precise enough to quote for. Without a name and a billing address there is no invoice, and so no contract to perform. That is the whole of the consequence.

• The hosting provider that serves these pages. It holds the server logs described above and nothing else about you.
• The email provider that carries and stores correspondence, so that the thread of a project stays readable.
• Payment providers - Stripe and PayPal. Where an invoice is settled through a payment link, the payment runs through them. They handle the card or account details on their own systems and as controllers in their own right, under their own notices. We receive a confirmation that a payment was made and by whom.
• An accountant, for invoices, returns and the statutory accounting records.
• Professional advisers, and public bodies where the law requires it - HM Revenue and Customs, a court, or a regulator making a lawful request.

Personal data is never sold, never rented and never handed to anyone for their own marketing. There is no mailing list on this site to be added to.

Some of the providers above are based outside the United Kingdom or hold data there. Where personal data is transferred out of the United Kingdom, it is transferred on one of two bases and no other: adequacy regulations, where they cover the country concerned, or the International Data Transfer Agreement issued by the Information Commissioner, including the UK Addendum to the standard contractual clauses.

You can ask us which provider holds what and on which of those bases, and the answer will be specific rather than a repetition of this paragraph.

• An enquiry that leads nowhere: twelve months from the last message, then deleted. Twelve months is long enough for an enquiry to be picked up again without keeping correspondence indefinitely, and a thread that still exists saves you writing the whole brief again.
• Correspondence and project files for a project that went ahead: six years from the end of the project, which is the period the Limitation Act 1980 allows for a claim on a contract of this kind.
• Invoices and accounting records: six years from the end of the financial year they fall in, because tax and company law require it.
• Server logs: held by the hosting provider for no more than 30 days. We take no copies of them, and they are technical records of requests rather than a file about a visitor. Ask us and we will name the provider holding them.

At the end of a period the material is deleted. Where a backup still holds a copy, it goes when that backup is cycled out rather than being dug out of it.

No cookies are set. Nothing is written to local storage or session storage, no pixel is loaded, no fingerprint is taken and no analytics or advertising service is present. There is nothing on these pages that regulation 6 of the Privacy and Electronic Communications Regulations requires consent for, which is why you are not asked for any.

The typefaces are served from this site rather than from a font network, so reading a page here does not send a request to another company on your behalf.

There is no separate cookie policy, because there would be nothing in it. If storage is ever added, this section will say what it is, what it is for and how long it lasts, and anything beyond what is strictly necessary will be asked for before it is set.

There is no automated decision-making that produces legal effects or anything similarly significant, and there is no profiling. Every reply, every quotation, every decision about whether a piece of work is taken on and every judgement about a string is made by a person.

Access to correspondence and to project material is limited to the people carrying out the work. Accounts with providers are held individually rather than shared, this site is served over an encrypted connection, and material that is no longer needed is deleted rather than left lying in a folder.

No claim is made here that any system cannot be broken into. If a breach happens that is likely to risk the rights and freedoms of a person, it is reported to the Information Commissioner within 72 hours as the law requires, and where the risk to a person is high that person is told directly.

• Access: a copy of the personal data held about you, and the reasons it is held.
• Rectification: correction of anything inaccurate, and completion of anything incomplete.
• Erasure: deletion, where there is no longer a reason to keep it.
• Restriction: a pause on use while an objection or a question of accuracy is worked out.
• Objection: to processing based on legitimate interests, on grounds relating to your situation.
• Portability: the data you gave us, in a structured, commonly used, machine-readable form, or sent to someone else where that is technically possible.
• Withdrawal of consent: at any time, where consent is what we relied on. At present nothing here relies on consent, and if that ever changes withdrawing it will not undo processing that was lawful before.

Write to sale@likelocal.sale to make any of them. A request is answered within one month. Where it is complex, or where several requests arrive together, that can be extended by two further months, and you will be told inside the first month that it has been extended and why. There is no charge, unless a request is manifestly unfounded or excessive. We may ask for enough information to be sure who is asking, and we will ask for no more than that.

Write to sale@likelocal.sale first. A complaint about data is acknowledged within three working days and answered within fifteen working days; if it needs longer than that, you will be told so and given a date.

You can also complain to the Information Commissioner's Office, which is the United Kingdom's supervisory authority for data protection, and you can do that at any time without asking us first.

The Commissioner's guidance, and the form for raising a concern, are at ico.org.uk.

The date under meta.updated at the top of this page is the date of the wording you are reading, and a change takes effect when it appears here.

Corrections of wording are made without notice. Where a change alters what actually happens to the data of someone whose data we hold - a new recipient, a new purpose, a longer retention period - that person is told by email before it takes effect, at the address the correspondence runs on.