Privacy policy
Effective 27 July 2026 · applies to hqfolio.com
The short version: this site sets no cookies, runs no analytics, shows no ads, and never sells data. The only personal information we ever hold is what you choose to send us when you get in touch — and we use it only to reply.
Who we are
HQFolio ("we") is an independent software studio. This policy covers the hqfolio.com website. Our products run on their own sites (for example Burnish at burnish.hqfolio.com) under their own terms and policies. For anything about your data, contact hello@hqfolio.com.
What this site collects
- Nothing, for reading. Browsing this site requires no account, sets no cookies, and loads no third-party trackers, fonts, or analytics.
- Hosting logs. Our hosting provider (Vercel) processes standard technical data — such as IP address and request details — to deliver the site and protect it from abuse. We use these logs only for security and troubleshooting.
- What you send us. If you email us, or use our enquiry form when it is available, we receive what you provide: typically your name, email address and message. The form is protected by Cloudflare Turnstile, which checks that you're human and may process technical signals (such as your IP address) to do so; delivery is handled by Resend, an email service.
What we do with it
We use your message to reply and, if you become a client, to carry on the conversation and the work. That's it. We keep correspondence only as long as we genuinely need it for those purposes and for ordinary business record-keeping, then delete it.
What we don't do
- No selling or renting of personal information — to anyone, ever.
- No advertising, profiling, or marketing lists. Contacting us signs you up to nothing.
- No cookies or cross-site tracking on this site.
Legal bases
Where UK or EU data-protection law (GDPR) applies, we rely on legitimate interests: responding to people who contact us, and keeping the site secure. We don't rely on consent because we don't do anything — like cookies or marketing — that would need it.
Service providers
Three carefully chosen providers process data on our behalf, under their own data-processing agreements and safeguards (including standard contractual clauses where data leaves the UK/EEA):
- Vercel — website hosting and delivery.
- Cloudflare (Turnstile) — bot protection on the enquiry form.
- Resend — delivery of enquiry-form messages to our inbox.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. In the UK and EU these come from the GDPR; in California, from the CCPA/CPRA (for the record: we do not sell or share personal information as those laws define it). To exercise any right, email hello@hqfolio.com — we'll act on it promptly. You also have the right to complain to your data-protection authority (in the UK, the Information Commissioner's Office).
Children
This site is for businesses and isn't directed at children, and we don't knowingly collect children's data.
Changes
If how we handle data changes, this page changes first — with a new effective date at the top.