Privacy notice.

1. Who is the data controller?

Saqib Engineering Ltd, trading as OpsWork — registered in England & Wales, company number 09891234.

Contact for any data-protection question or to exercise a right: [email protected].

ICO registration: in progress (number to be added on this page once issued). Current status is published on the ICO register.

2. What we collect, when

This site is a marketing brochure. It collects personal data in only one place:

• Contact form on /contact. The form opens your default mail client pre-filled with the content you typed (name, email, consultancy, enquiry type, message). The email lands in [email protected] when you press send. We hold no data on you before that send.

We do not set cookies, run advertising trackers, fingerprint your browser, or buy / sell data from third parties. See /cookies for detail.

Server logs at our hosting provider (Cloudflare Pages) include IP addresses for security and abuse-prevention purposes; these are retained for 30 days and not joined to any identifier.

Aggregate visit metrics are collected by Cloudflare Web Analytics in a cookieless, anonymised form (no IPs stored, no fingerprinting) — see ICO Cookie Guidance 2023.

3. Why we collect it (lawful basis)

• Contact form messages: legitimate interest in responding to commercial enquiries about our service (UK GDPR Article 6(1)(f)).
• Server logs: legitimate interest in keeping the site secure (UK GDPR Article 6(1)(f)).
• Anonymised analytics: legitimate interest in understanding aggregate site usage (UK GDPR Article 6(1)(f)). No personal data is processed.

4. How long we keep it

• Contact enquiry emails: 3 years from last contact (then auto-purged from the mailbox), or longer if you become a customer (we'll list customer-data retention separately at that point).
• Cloudflare Pages server logs: 30 days.
• Aggregate analytics rollups: 12 months.

Customer-tenant data retention (post-onboarding) is governed by the per-customer contract + our offboarding plan-as-code, not by this site notice. See /security for that detail.

5. Who we share it with

Sub-processors for opswork.uk are listed and dated on /security. The full list as of 11 May 2026:

• Cloudflare (CDN, Pages hosting, Web Analytics)
• Microsoft Azure (compute, language-model processing)
• Microsoft 365 (mailbox for the contact form recipient + business systems)
• Office365 Connector (outbound email when we reply)

We do not share enquiry data with marketing providers, lead-resale services, or analytics platforms beyond the cookieless aggregate above.

International transfers: Cloudflare may route traffic through edge nodes outside the UK; this is governed by Cloudflare's UK IDTA / SCCs. Azure + M365 production data stays in UK South.

6. Your rights (UK GDPR Articles 15-22)

As a data subject you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccuracies corrected (Art. 16)
• have your data erased (Art. 17), subject to legal retention overrides
• restrict processing in certain circumstances (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• not be subject to a solely automated decision with legal effect (Art. 22) — note that no decision made by OpsWork's agents is "solely" automated; Saqib personally signs off every commercial commitment

To exercise any right, email [email protected]. We respond within 30 days.

If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

7. Changes to this notice

Material changes are announced at the top of the page and on the blog. Minor wording fixes don't trigger a re-notification. A diff of every change to this notice is available on request.