Privacy Notice
Last updated: 9 September 2026
1. Who we are
Quick Pigeon Limited (“we”, “us”, “our”) is the data controller for the personal data described in this notice. We are registered in England & Wales (company no. 17300164), registered office at 1 Hosta Close, Liverpool, England, L33 1SR. You can contact us at hello@quickpigeon.co.uk. We have not appointed a Data Protection Officer; our privacy contact is the same address.
2. What personal data we collect
We collect and process the following personal data:
- Contact form data — when you submit an enquiry: your name, email address, company name (optional), budget indication (optional), and the message you write.
- Admin authentication data — for our internal admin team only: email address, password (managed by our secure sign-in provider; never visible to us), MFA settings, and sign-in events.
- Usage and cookie data — we set only strictly necessary cookies: a cookie that remembers your cookie preference, and sign-in session cookies that apply to our admin area only. We set no analytics or advertising cookies. See our Cookie Policy.
We do not collect payment data, sensitive personal data (special category), or data about children.
3. How and why we use it
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Receive and respond to your contact enquiry | Legitimate interests (our interest in responding to business enquiries) |
| Keep our systems secure and prevent abuse | Legitimate interests |
| Check that contact form submissions come from a person, not a bot | Legitimate interests — preventing spam and abuse of the contact form |
| Comply with legal and accounting obligations | Legal obligation |
4. Cookies
We use strictly necessary cookies to operate this site. At launch we set no analytics or marketing cookies. See our Cookie Policy for the full list and your choices.
5. Who we share your data with
We share personal data only with processors acting on our instructions:
- Amazon Web Services (AWS) — website hosting (AWS Amplify Hosting), secure sign-in, data storage, and email delivery. Data is stored in AWS’s London region (eu-west-2) and stays in the UK.
- Cloudflare (Turnstile) — anti-spam verification on the contact form (your Turnstile response token is sent for verification; no other data from your enquiry is shared).
We do not sell your personal data.
6. International transfers
Your data is stored in AWS’s London region (eu-west-2) and stays in the UK. We do not currently transfer personal data outside the UK. If that changes, any transfer would rely on UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) / UK Addendum to the EU Standard Contractual Clauses, and we would update this notice.
7. How long we keep your data
- Contact enquiries — 24 months after the enquiry is closed, then deleted. You can request earlier deletion (see section 8).
- Admin authentication data — for the life of the admin account, deleted when the account is removed.
8. Your rights
Under UK GDPR you have the right to: access your data, rectification, erasure, restriction of processing, data portability, object to processing, and to withdraw consent at any time (without affecting prior processing based on consent).
To exercise any right, email hello@quickpigeon.co.uk. We will acknowledge your request within 5 working days and respond in full within one calendar month.
9. Complaints
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) — helpline 0303 123 1113. We would appreciate the chance to resolve concerns first.
10. Changes to this notice
We may update this notice; the “Last updated” date always reflects the current version. Material changes will be announced on this page with a new ‘last updated’ date.