Contact details
Name, email, company and anything you write into the brief form or send us over email or Telegram. Provided by you, when you choose to reach out.
This policy explains what personal data Afiled collects when you brief us, run an engagement or simply browse the site — why we hold it, how long we keep it, and the rights you can exercise. We collect the minimum needed to deliver work and answer you. We do not sell data.
We collect only what a brief, an engagement or a page view genuinely requires. There is no hidden profiling and no data broker feed.
Name, email, company and anything you write into the brief form or send us over email or Telegram. Provided by you, when you choose to reach out.
Target URLs, geos, KPIs, campaign notes and the access you grant us to run delivery. Held only for the duration of the work plus the retention window below.
Invoicing name, VAT ID and payment rail. Card and bank numbers never touch our systems — they stay with the payment provider or on the crypto rail you choose.
Aggregate page-view and referrer data via privacy-respecting analytics. No cross-site advertising cookies are set from this domain.
Standard access logs — IP, user agent, timestamp — retained short-term for security and abuse prevention, then rotated out.
No special-category data, no covert tracking, no purchased contact lists. If a form field is not needed to deliver or reply, we do not ask for it.
Every category above maps to a lawful basis under the GDPR / UK GDPR.
Contact details are processed to reply to your enquiry and scope a proposal. Lawful basis: steps taken at your request prior to a contract.
Engagement and access data are processed to deliver the agreed work. Lawful basis: performance of the contract set out in your proposal.
Billing data is processed to invoice and meet tax obligations. Lawful basis: legal obligation and legitimate interest in being paid.
Logs and aggregate analytics are processed to keep the service secure and understand demand. Lawful basis: legitimate interest, balanced against your rights.
We only email you about your own enquiry or engagement. Any broader updates are opt-in, and every message carries a one-click unsubscribe.
Where processing rests on consent, you can withdraw it at any time without affecting anything we lawfully did before you withdrew.
Data is held only as long as its purpose lasts, plus a defined tail for legal and accounting duties. Then it is deleted or anonymised.
If a brief does not turn into an engagement, we hold the correspondence for up to 12 months in case you return, then delete it.
Engagement data is kept for the life of the contract and purged within a standing close-out window after the final paid period, in line with our confidentiality policy.
Invoices and tax records are retained for 6 years to meet statutory accounting requirements, then securely destroyed.
Delete sooner: you can ask us to erase your data before these windows close. We will honour the request unless a legal or accounting duty requires us to keep a specific record — in which case we tell you which record and why.
We do not sell, rent or trade personal data. It is not a product and it is not shared for anyone else's advertising.
Email, hosting, invoicing and analytics providers process data on our written instructions only, under data-processing agreements that bind them to this policy.
Where a processor is outside the UK/EEA, transfers rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.
We disclose data only where compelled by a valid legal order, and we push back on requests that are overbroad or unlawful.
Access is least-privilege and logged. Data in transit is encrypted; credentials you share for delivery are stored in a secrets manager, not in plain text.
If a breach is likely to affect your rights, we notify the relevant supervisory authority within 72 hours and tell affected clients without undue delay.
Ask for a copy of the personal data we hold about you, and the purposes we hold it for.
Ask us to correct anything inaccurate or complete anything incomplete.
Ask us to delete your data, subject to the retention duties set out in §03.
Ask for your data in a portable format, or ask us to pause processing while a dispute is resolved.
Object to processing based on legitimate interest, and complain to your data protection authority (in the UK, the ICO) if you are unhappy with our response.
Email hello@afiled.com with "PRIVACY" in the subject. We respond within one month, free of charge.
Data requests, processor lists and transfer safeguards — put "PRIVACY" in the subject and we handle it within a month.