Privacy Notice

Last updated 13 August 2026. This notice covers stripyfish.net only. Our individual products and services maintain their own separate privacy notices covering their own data processing.

Who we are

Stripy Fish Networks Limited is a company registered in England and Wales (company number 4958546), registered office 26 Wellhead Lane, Westbury, Wiltshire, BA13 3PT ("we", "us", "Stripy Fish Networks").

We are registered with the UK Information Commissioner's Office as a data controller for the personal data described in this notice — registration number ZC148489.

We're a small organisation and aren't required to appoint a Data Protection Officer under UK GDPR. We haven't appointed one — for anything privacy-related, contact privacy@stripyfish.net.

What we collect, and why

This site's main data collection point is the contact form. When you submit it, we collect the name, email address, and message you provide, purely to read and reply to your enquiry.

Your message isn't stored in a database — it's forwarded directly by email to our team inbox, where it's kept in line with our normal business email practice, and deleted on request (see Your rights, below).

Legal basis: responding to an enquiry you've sent us is a legitimate interest of ours (Article 6(1)(f) UK GDPR); if it leads to us discussing a service with you, further processing relies on taking steps toward a contract (Article 6(1)(b)).

If you accept analytics cookies via the banner on this site, we also collect the usage information described under Analytics, below.

Cloudflare Turnstile

The contact form is protected by Cloudflare Turnstile, a challenge widget that checks a submission is coming from a real person rather than automated spam, without showing you a traditional CAPTCHA. As part of that check, your IP address is sent to Cloudflare. We don't receive or store the details of that check ourselves — only whether it passed.

Legal basis: legitimate interest in keeping this form free of automated abuse (Article 6(1)(f) UK GDPR).

Analytics (Google Analytics 4)

If you click Accept on the cookie banner shown on your first visit, we load Google Analytics 4 (GA4), which sets cookies (including _ga and _gid) to collect information about how you use this site — pages visited, time on site, approximate location, device and browser type. We turn on IP anonymisation, so your full IP address isn't stored by Google against your activity.

GA4 doesn't run, and no analytics cookie is set, unless and until you accept. You can withdraw your consent at any time using the Cookie preferences link in the footer of every page, which lets you change your choice or clear it.

Legal basis: your consent (Article 6(1)(a) UK GDPR, and regulation 6 of the Privacy and Electronic Communications Regulations 2003 for the cookies themselves). You can withdraw consent as easily as you gave it.

Who we share data with

• Cloudflare — the Turnstile spam/fraud check described above
• Our email/SMTP provider — delivers your message to our inbox
• Google — Google Analytics 4, only if you've accepted analytics cookies; Google processes this data as our processor under its data processing terms

We don't sell personal data, run advertising trackers, or share form submissions with anyone else.

International transfers

Cloudflare and Google both operate infrastructure outside the UK, including in the United States. Any transfer of your IP address as part of a Turnstile check, or of analytics data if you've accepted GA4, is covered by each provider's own privacy policy and standard contractual safeguards (Cloudflare's data processing addendum and Google's, respectively, both incorporate UK-approved International Data Transfer Addendum terms).

How long we keep data

We don't retain a copy of your submission beyond our team email inbox — there's no separate database for contact-form data. Turnstile's own verification cookie is short-lived and tied to completing the challenge, not persistent tracking. If you've accepted analytics, GA4's own cookies (_ga, _gid) persist for up to 13 months and 24 hours respectively, per Google's default retention; your consent choice itself is stored in your browser until you change or clear it.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data — for a contact-form enquiry, this means deleting the email from our inbox on request
• Object to processing based on our legitimate interests, at any time
• Complain to the ICO if you think we've got something wrong

To exercise any of these, email privacy@stripyfish.net. We'll respond within one month.

Cookies

This site sets no cookies of its own. Two other cookies are in play:

• Cloudflare Turnstile's short-lived challenge cookie, set on the contact page to verify a submission is genuine before it's sent. We treat this as strictly necessary to keep the form usable and free of automated abuse, so it doesn't need your consent.
• Google Analytics 4's _ga/_gid cookies, described under Analytics above — these are not essential, so they're only set if you accept them via the cookie banner shown on your first visit.

We don't use any advertising cookies, and don't use analytics cookies for anything beyond the aggregate usage statistics described above.

Security

Form submissions are sent over an encrypted connection. Turnstile helps block automated/bot submissions before they reach us.

Changes to this notice

We'll update the date at the top of this page whenever we make a material change.

Contact and complaints

If you think we've infringed UK GDPR in how we've handled your data, you can complain to us directly by emailing privacy@stripyfish.net — we'll acknowledge your complaint within 30 days and, without undue delay, look into it and let you know the outcome (Data Protection Act 2018, section 164A). You don't need to complain to us first, and complaining to us doesn't affect your right to complain to the UK Information Commissioner's Office at any time, at ico.org.uk/make-a-complaint.