Who we are
SF Info is an editorial site operating from the United Kingdom. Under UK GDPR the data controller is the SF Info editorial team. The contact address for privacy enquiries is privacy [at] sfautomation.co.uk. We do not employ a formal data protection officer because the volume and category of processing does not meet the threshold under UK GDPR Article 37.
Data we collect
We collect three categories of data. First, standard web-server logs including IP address, user agent, page requested and response code. These are kept for 30 days for security and abuse purposes, then deleted. Second, correspondence sent to any of the site email addresses (editorial, corrections, press, privacy). This is kept for two years after the last reply, then deleted. Third, aggregate analytics counts of page views and referrer, without individual profiling. We do not use behavioural tracking, do not run ad networks, and do not sell data to third parties.
Cookies
The site itself sets no cookies. See the cookies page for full detail. If a browser extension you have installed sets cookies against this domain, that is under the extension's own control and not ours.
Third-party processors
The site is hosted on a UK-based hosting provider whose data processing agreement is available on request. Email is handled by a standard UK-registered email provider under a similar agreement. We do not use third-party analytics or advertising networks, so no cookies or identifiers are shared with those third-party categories.
Your rights under UK GDPR
You have the right to access, rectify, erase and port your personal data, to restrict or object to processing, and to complain to the Information Commissioner's Office (ICO). To exercise these rights, contact privacy [at] sfautomation.co.uk. We respond within one calendar month. Requests concerning correspondence records are usually straightforward; requests concerning server logs may take longer because IPs in server logs are not necessarily linked to a person we can identify.
Data outside the UK
Our hosting and email providers are UK-based. We do not knowingly transfer personal data outside the UK. If any future provider change would introduce a transfer, we would update this page in advance and confirm the transfer mechanism (adequacy, standard contractual clauses, or another lawful route).
Changes to this policy
This policy is versioned by date. Substantive changes are noted at the top with a short summary. Historic versions are available on request. The current effective date is 6 August 2026.