Privacy policy.

Fenco Digital (“Fenco”, “we”, “us”, “our”) is a Northern Ireland-based business that helps UK companies reduce costs and grow through card payment solutions, point-of-sale (POS) systems, website design and app design.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Fenco Digital is the “data controller” of any personal information you provide to us through this website.

If you have any questions about this policy or how we handle your data, contact us at info@fencodigital.com or on 07426 821449.

We only collect what we need to respond to your enquiry and, where relevant, match you with the right payment or technology partner. That includes:

• Contact details — your name, email address, phone number and (optionally) your business name and postcode.
• Business details — annual card turnover band, whether you already have a card machine and which service you’re interested in (Card Payments, POS Systems, Website Design, App Design or a bundle).
• Anything else you tell us — the free-text message field on our contact form.
• Technical data — basic information collected automatically by our hosting and analytics tools, such as IP address, device and browser, pages viewed and timestamps.

We do not knowingly collect data from anyone under the age of 18.

We use your information to:

• Reply to your enquiry and send you the quote or comparison you asked for.
• Match you with the payment, POS or design partner that best suits your business.
• Keep a record of our conversations so we can support you on go-live day and afterwards.
• Improve our website and marketing (aggregated, non-identifying analytics).
• Meet our legal, accounting and regulatory obligations.

Under UK GDPR we rely on the following lawful bases:

• Consent — when you fill in our contact or quote form, you’re asking us to get in touch. You can withdraw that consent at any time (see “Your rights” below).
• Legitimate interests — running our business, following up on active enquiries, and improving our services.
• Legal obligation — where we’re required by law (e.g. tax, accounting, fraud prevention).

We never sell your data. We only share it with the following, on a strictly need-to-know basis:

• Service providers we use to run the business — our website host, email provider, cloud database, and any analytics tools. These providers are contractually required to protect your data and only process it on our instructions.
• Payment and technology partners — with your permission, we’ll introduce you to the payment or POS partner that best fits your business. We’ll always tell you which partner before we share anything.
• Authorities and regulators — where the law requires us to (for example, to respond to a lawful request from HMRC, a court or the Information Commissioner’s Office).

This website uses a small number of cookies and similar technologies to help us understand how visitors use the site so we can improve it. This is limited to standard analytics such as page views, referral source and general location (country/city, not precise location).

You can control cookies through your browser settings. Refusing analytics cookies will not affect your ability to use the site or submit an enquiry.

We keep your personal data only for as long as we need it:

• Enquiries that don’t lead to a customer relationship — up to 24 months from your last contact with us, then deleted.
• Active customers — for the duration of our working relationship, plus a further 7 years to meet our legal, tax and accounting obligations.
• Website analytics — typically 12–26 months in aggregated form.

Your data is stored in a secured cloud database with encryption in transit (HTTPS/TLS). Access is restricted to authorised personnel on a need-to-know basis, and we use industry-standard practices to keep it safe.

If a data breach occurs that’s likely to affect your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) within 72 hours, as required by UK GDPR.

You have the following rights under UK GDPR. All are free of charge and we’ll respond within one month:

• Right of access — a copy of the personal data we hold on you.
• Right to rectification — correcting inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — asking us to delete your data.
• Right to restrict processing — limiting how we use your data.
• Right to object — to processing based on legitimate interests, and to direct marketing at any time.
• Right to data portability — receiving your data in a portable, machine-readable format.
• Right to withdraw consent — at any time, where we’re relying on consent.

To exercise any of these rights, email us at info@fencodigital.com.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator, at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to sort things out with you first, though.

Where any of our service providers process data outside the UK, we ensure appropriate safeguards are in place — typically the UK International Data Transfer Agreement or equivalent standard contractual clauses recognised by the ICO.

We may update this policy from time to time to reflect changes in the law, our services, or the tools we use. The “last updated” date at the top of this page will always show when it was last changed.

Questions, requests or complaints about this policy? We’d love to help.

• Email: info@fencodigital.com
• Phone: 07426 821449