This policy explains how Phiof Digital collects, uses, stores and protects personal data when you visit our website, enquire about our services, or work with us as a client.
Last updated: 7 July 2026
Phiof Digital ("we", "us", "our") operates the website at phiof.digital. We build custom software, integrations and automation for businesses.
If you have questions about this policy or how we handle personal data, contact us at hey@phiof.digital.
We may collect and process the following categories of personal data:
We use personal data only where we have a lawful basis under UK GDPR:
We rely on consent for non-essential cookies and optional marketing communications.
We rely on legitimate interests to operate our business, respond to enquiries and improve our services, balanced against your rights.
We rely on contract performance when processing data necessary to deliver agreed work.
We do not sell your personal data. We share data only with trusted processors who help us run our business, under written agreements that require them to protect your data.
Some processors may store or process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as UK adequacy regulations, UK International Data Transfer Agreements, or equivalent protections.
We keep personal data only as long as necessary for the purposes described in this policy.
Enquiry and qualifying data is typically retained for up to 24 months unless a client relationship continues.
Client project data is retained for the duration of the engagement and thereafter as required for legal, tax or dispute purposes.
Analytics data is retained according to our analytics provider's settings, generally in aggregated form.
Under UK data protection law, you have rights including access, rectification, erasure, restriction, objection, data portability and withdrawal of consent (where processing is based on consent).
To exercise your rights, email hey@phiof.digital. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure.
Our services are aimed at businesses. We do not knowingly collect personal data from children under 18.
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be highlighted on the website where appropriate.
