Website & enquiry privacy

1. Who is responsible?

Pure Light Ltd, company number 17433578, registered in England and Wales, is controller for its own business enquiries, contracting records and website administration. Registered office: 66 Paul St, London EC2A 4NA, United Kingdom. Email info@purelight.uk for privacy questions or rights requests.

2. Website visits

Our hosting and security provider, Cloudflare, processes technical information such as IP addresses, request URLs, device/browser information and timestamps to deliver and protect the website. We use this processing for our legitimate interests in operating a reliable and secure site.

The website does not include an advertising tracker, an embedded social feed or a marketing analytics script. Fonts are hosted on our own site. Security measures supplied by the hosting provider may process technical information independently of the page code. See Cloudflare’s privacy policy.

3. Enquiries and engagement records

If you email us, we receive your email address, the information you provide and the correspondence that follows. Our company email is hosted by Proton. We use enquiries to respond to you, assess the requested work and prepare proposals. This is based on steps towards a contract where you are the prospective contracting party, or our legitimate interests in handling business enquiries where you act for an organisation.

For an agreed engagement we also process the business contact, contract, access and billing information needed to deliver the work, administer the relationship and meet legal obligations. Contract performance, legitimate interests and legal obligations apply according to the activity. Please do not include passwords, subscriber lists, special-category information or confidential manuscripts in an initial enquiry.

Contacting us does not subscribe you to marketing. We do not sell enquiry information or use it to advertise unrelated products.

4. Managed services and reader data

Our role is determined separately for each activity. Where a client decides why reader information is collected and how it is used, Pure Light may act as processor under documented instructions and an appropriate agreement. In that case, the client’s privacy notice explains the controller and reader rights.

A service genuinely operated by Pure Light as controller requires a separate, accurate notice and agreed operating responsibilities before collection begins. Hosting or sending email alone does not transfer controller responsibility. This page does not designate Pure Light as controller of any named author’s reader list and does not transfer existing subscriber records.

Public author pages may use a pen name. That does not remove required disclosures, contractual identification or statutory obligations. We do not promise anonymity or offer a substitute for legal advice.

5. Who receives information?

We use hosting/security and email providers to operate this site and manage enquiries. Information may also be shared with professional advisers, payment/accounting providers or authorities where necessary for an engagement or a legal requirement. Suppliers and access arrangements for a managed service are identified during scoping, not assumed to be identical across clients.

Providers may process information outside the UK. Applicable contractual safeguards, such as approved transfer clauses or a recognised adequacy arrangement, must be considered for the relevant service. Details for a proposed engagement are available on request. See also Proton’s privacy policy.

6. Retention

We retain correspondence while it is needed to answer an enquiry, manage the business relationship or address a dispute. Unsuccessful enquiries are subject to a retention review after 12 months; that is not a promise that every copy is automatically deleted on a fixed date. Contract and financial records may need to be kept for six years or longer where a specific legal obligation or dispute requires it.

Technical data follows the relevant provider’s service settings and retention terms. Client data retention and deletion or return arrangements are agreed for each managed service. We can explain the applicable arrangements when you enquire.

7. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Email info@purelight.uk. We normally respond within one month; lawful extensions and identity checks may apply.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. There is no solely automated decision-making producing legal or similarly significant effects through this website’s enquiry process.

8. Other products and updates

The AI API privacy policy covers the inference service. Other product websites publish their own notices. External sites, retailers and social platforms have their own terms when you follow a link.

We update this notice when website or enquiry processing changes. Material new collection requires the relevant notice at the point of collection.