This Privacy Policy explains how Appsfield LLC (“Appsfield”, “we”, “us”) collects, uses and protects personal information when you visit appsfield.co, contact us through the website, or write to our business email addresses.
Who we are
Appsfield LLC operates appsfield.co. You can contact us about this policy or about your personal information at contact@appsfield.co.
Scope
This policy covers the Appsfield website and our business communications. Our products have their own privacy policies; for example, the POSFOLD privacy policy is published at https://posfold.com/privacy.
Information we collect
- Contact form: your name, email address, optional company name, subject, enquiry type, message and any file you choose to attach, together with the date of submission and the language of the page.
- Emails you send us: sender and recipient addresses, subject, date, message content and attachments as delivered by our email provider, and the results of standard email authentication checks (SPF, DKIM and DMARC).
- Website statistics (when enabled): aggregated daily counts of page views, the referring website (domain only), the language of the page and the general device category (mobile, tablet or desktop). These statistics do not use cookies, do not identify you and do not store your IP address.
- Abuse prevention: to protect the contact form, we temporarily use a one-way, salted hash of your IP address and of your email address to apply rate limits. These records expire automatically within one day.
- Administrative accounts: for the people authorised to manage the website, we process sign-in information through our authentication provider and keep a record of administrative actions for security purposes.
- Hosting logs: our hosting provider may process technical information such as IP addresses in its server logs in order to deliver and secure the website, under its own policies.
How we use information
- To read and respond to your enquiry and to manage our business relationships.
- To keep our website, email and administrative systems secure and to prevent abuse.
- To understand, in aggregate, how the website is used so that we can improve it.
- To comply with legal obligations.
We do not sell personal information, we do not use it for advertising, and we do not send marketing emails without your consent. Submitting the contact form does not trigger any automatic email.
Legal bases
Where the EU or UK General Data Protection Regulation applies, we rely on our legitimate interests in responding to enquiries, running our business and keeping our systems secure; on steps you request before entering into a contract with us; and on compliance with legal obligations. Where we rely on consent, you can withdraw it at any time.
Service providers
We use the following service providers, which process information on our behalf:
- Netlify — website hosting, server functions and private file storage.
- Google Firebase / Google Cloud — database and administrator authentication.
- Resend — sending and receiving email.
- Cloudflare Turnstile — bot protection on the contact form, when enabled.
International transfers
Our service providers may process information in the United States and in other countries. Where required, these transfers are covered by appropriate safeguards offered by the providers, such as standard contractual clauses.
Retention
We keep enquiries and business correspondence for as long as needed to respond to them and to maintain records of our business relationships, and then delete them. Rate-limiting records expire within one day. Aggregated website statistics contain no personal information. Records of administrative actions are kept for security purposes.
Security
We protect information with encryption in transit, access controls checked on the server, role-based permissions and audit logs. Email attachments are stored privately and are never publicly accessible. No system can be perfectly secure, but we work to protect your information and to respond promptly to any issue.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict certain processing, to data portability, and to withdraw consent. To exercise these rights, email contact@appsfield.co. We may need to verify your identity before responding. You may also have the right to lodge a complaint with a data protection authority.
Children
Our website is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy. The date at the top of this page shows when it was last changed.
Contact
For questions about this policy, write to contact@appsfield.co.