Privacy Policy
This Privacy Policy explains how Silsila Digital Ltd (“Silsila”, “we”, “us”) collects, uses, and protects your personal data when you visit our website or otherwise interact with us. “Silsila” and “Silsila Labs” are trading names of Silsila Digital Ltd. This policy is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
01Who we are
Silsila Digital Ltd is a private limited company registered in England and Wales.
- Company name: Silsila Digital Ltd
- Company number: 12188279
- Registered office: 320 Firecrest Court, Centre Park, Warrington, United Kingdom, WA1 1RG
- Contact for privacy enquiries: faraz.fookeer@silsiladigital.com
Silsila Digital Ltd is the data controller for the personal data described in this policy. We are registered with the UK Information Commissioner’s Office (ICO); our registration reference is available on request.
02What personal data we collect
We collect only the personal data we need to operate the website, deliver the services you have requested, and communicate with you. Specifically:
| Data we collect | When & how |
|---|---|
| Email address | When you contact us via email or an enquiry form. |
| Name and role (optional) | When you provide them in correspondence or enquiry forms. |
| Company / organisation (optional) | When you provide it during a consulting enquiry. |
| Correspondence content | The content of emails or messages you send to us. |
| Standard server logs | IP address, browser type, timestamps — collected by GitHub Pages (our static hosting provider) for security and abuse prevention. |
We do not collect special category data, financial information, government identifiers, or data from children under 16. If we ever need to collect such information for a specific engagement, we will explain why and obtain explicit consent in writing.
03Lawful basis for processing
Under UK GDPR we must have a lawful basis for processing your personal data. The bases we rely on are:
- Legitimate interests (Article 6(1)(f)): For responding to your enquiries, maintaining basic website security logs, and following up on consulting conversations you have initiated. Our legitimate interest is operating and protecting our business; we have balanced this against your rights and consider this processing low-risk and expected.
- Contract (Article 6(1)(b)): Where you engage us for consulting or training services, processing personal data necessary to deliver that engagement.
- Legal obligation (Article 6(1)(c)): Where we are required to retain certain records (for example, financial records under HMRC rules).
04How we use your data
We use the personal data we collect to:
- Respond to enquiries you send us
- Deliver consulting and training services you have engaged us for
- Maintain accurate company records, accounts, and tax filings
- Protect our website and services against fraud and abuse
We do not use your data for automated decision-making, profiling, or behavioural advertising. We do not sell your data to anyone. We do not share your data with third parties for their marketing purposes.
05Who we share your data with
We share data only with the trusted service providers we need to operate the business. Each is bound by data processing terms consistent with UK GDPR.
| Provider | Purpose | Location |
|---|---|---|
| GitHub Pages | Website static hosting | United States (under approved transfer mechanisms) |
| Google Workspace | Business email and document storage | EU and United States (under SCCs) |
| UK accountants & tax advisors | Statutory accounts and tax compliance | United Kingdom |
Where data is transferred outside the UK or European Economic Area, we rely on adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses, as appropriate.
06How long we keep your data
We retain personal data only for as long as necessary for the purpose it was collected.
- Enquiry correspondence: Up to 24 months after our last contact, unless an active engagement extends this period.
- Client engagement records: Retained for the duration of the engagement and for 6 years afterwards to meet statutory accounting and contract law obligations.
- Server logs: Retained by GitHub for the period set out in their privacy documentation, typically 30–90 days.
07Your rights under UK GDPR
You have the following rights in relation to your personal data:
- Right of access: To request a copy of the personal data we hold about you.
- Right to rectification: To have inaccurate personal data corrected.
- Right to erasure (“right to be forgotten”): To request deletion of your personal data, subject to legal retention obligations.
- Right to restriction: To request that we limit how we use your data in certain circumstances.
- Right to object: To object to processing based on legitimate interests, including direct marketing.
- Right to data portability: To receive a copy of your data in a structured, machine-readable format.
- Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.
- Right to lodge a complaint: With the UK Information Commissioner’s Office.
To exercise any of these rights, email faraz.fookeer@silsiladigital.com. We will respond within one month. There is no charge unless the request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner’s Office: ico.org.uk, helpline 0303 123 1113. We’d appreciate the chance to address your concerns directly first.
08Cookies and tracking
Our website uses no third-party tracking cookies, no analytics cookies (no Google Analytics, no Plausible, no Fathom), and no behavioural tracking. The site is hosted on GitHub Pages and may set minimal first-party cookies necessary for security and basic site function; these are not used to identify you.
We use Google Fonts and a font CDN; these load fonts but do not set tracking cookies under their current configuration.
Because we do not deploy any non-essential cookies on the site itself, we do not present a cookie consent banner. If we add analytics or marketing cookies in future, we will request your consent at that point.
09Security
We take appropriate technical and organisational measures to protect your data. These include encrypted email, strong account authentication, limited access to systems holding personal data, and use of reputable service providers with documented security practices.
No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and you without undue delay, as required by UK GDPR.
10Children’s privacy
The Silsila website and services are intended for adults working in professional contexts. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please email faraz.fookeer@silsiladigital.com and we will delete it.
11Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The version number and effective date at the top of this page will be updated when we do. For material changes affecting people we are actively corresponding with, we will notify them by email.
12Contact us
For any questions, requests, or complaints about how we handle your personal data:
- Email: faraz.fookeer@silsiladigital.com
- Post: Data Protection, Silsila Digital Ltd, 320 Firecrest Court, Centre Park, Warrington, United Kingdom, WA1 1RG