Privacy Policy

Last updated: 21 October 2026

1. Introduction

Fibrewise Ltd ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you submit information through our contact form or subscribe to our blog newsletter.

2. Data Controller

The data controller responsible for your personal data is:

Fibrewise Ltd
86-90 Paul Street
London, United Kingdom
EC2A 4NE

3. Contact Form

When you submit our contact form, we collect the following personal data:

Email Address: To respond to your inquiry.
Subject: To understand what the query is about.
Message Content: To understand and respond to your inquiry.

Additionally, we automatically collect certain technical information when you use our services:

Device Information: Type of device, operating system, and browser used.
IP Address and Location Data: To ensure service reliability and security.
Usage Metadata: Such as access times and interaction patterns.

This technical data helps us maintain service security, optimize performance for different devices, prevent fraudulent activities, and provide a better user experience tailored to your technical environment.

We process this data to respond to your inquiry. The legal basis is your consent, which you give when you submit the form, and our legitimate interest in keeping the form free of spam and abuse.

You can subscribe on our blog to get an email when we publish a new post. Each email contains a short summary and a link to read the post on our website. We send nothing else to the list.

How subscribing works. When you enter your email address and the signup passes our automated checks, you are subscribed straight away. We don't send a welcome or confirmation email; the first email you get from us is the next new post. If someone subscribed your address without asking you, use the unsubscribe link in that email and we won't email you again.

What we collect:

Email Address: To send you new-post emails.
Consent Record: When you subscribed, which version of the signup wording you saw, and these technical details about the signup: IP address, approximate location derived from it (country and city), browser and device (user agent), browser language and time zone, and the page you came from. We keep this as a record of your consent and to spot and stop signups made in someone else's name. If you subscribed while we still asked for confirmation by email, it also covers when you confirmed, with the same details for that step.
Security Check: The result of a Cloudflare Turnstile check, which protects the form from automated signups.
Delivery Records: For each email we send you, whether it was delivered, delayed, bounced, or marked as spam.
Unsubscribe Record: When and how you unsubscribed, and the same technical details if you used the unsubscribe page.

We do not record whether you open our emails or which links you click, and we do not use your address for anything other than this newsletter.

Legal basis. We email you because you consented to it (UK GDPR Article 6(1)(a) and regulation 22 of the Privacy and Electronic Communications Regulations). We process the technical and consent-record data on the basis of our legitimate interests (Article 6(1)(f)): preventing abuse of the signup form, keeping evidence of your consent, and making sure we stop emailing addresses that bounce or report spam.

Unsubscribing. Every email has an unsubscribe link, and supporting mail apps (such as Gmail and Apple Mail) also show their own one-click unsubscribe button. Either takes effect immediately. You can also ask us to unsubscribe you using the contact details below.

How long we keep it:

Subscribers: For as long as you stay subscribed.
After you unsubscribe: Your address and consent record are deleted 30 days later.
Bounced or spam-reported addresses: We keep only the address, the reason, and the date, so that we never email it again. Everything else is deleted straight away. Ask us if you want this record removed too.
Delivery records: Deleted after 90 days.

Our internal administration log records actions such as unsubscribing an address with the address masked (for example, "j***@example.com"), and keeps that entry after the address itself has been deleted.

We do not sell your personal data, and we do not share it with third parties except the service providers that process it on our behalf to run this website, or where required by law:

Vercel Inc.: Hosts this website and receives your IP address when you visit it or submit a form.
Convex, Inc.: Hosts the database that stores contact-form messages and newsletter subscriptions.
Resend, Inc.: Sends our emails, including newsletter emails, and reports whether they were delivered.
Cloudflare, Inc.: Provides the Turnstile security check on our forms.

Some of these providers process data outside the United Kingdom, including in the United States. Where they do, the transfer is protected by the safeguards in our agreements with them, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.

6. Data Retention

We retain contact-form messages only as long as necessary to respond to your inquiry, unless a longer retention period is required by law. Newsletter data is kept for the periods listed in section 4.

7. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your personal data.
Object to or request restriction of processing.
Receive your data in a portable format.
Withdraw your consent at any time, for example by unsubscribing. This does not affect processing that took place before you withdrew it.

To exercise any of these rights, contact us using the details below. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk⁠ or on 0303 123 1113.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Unsubscribe links are single-purpose, cannot be guessed, and only take effect when you press the button on the page they open (or when your mail app's own unsubscribe button is used).

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. If a change affects how we use your newsletter subscription, we will ask for your consent again before relying on it.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: