Privacy Policy
1. Who we are (the data controller)
Ground Force Solutions Ltd (trading as GFS Rail Projects),
company no. 13660356, registered office First Floor Office, 3 Hornton Place, London, United Kingdom, W8 4LZ,
registered in England & Wales, is the controller of the data collected through this website.
Contact: info@gfsrailprojects.co.uk · 07463 768 492.
2. What data we collect and how
| Category | Data | Source |
|---|---|---|
| Contact form | name, company, phone, email, package type, message | provided by you |
| Analytics (Google Analytics 4) | pseudonymous identifiers, pages viewed, device type, approximate location | collected automatically only with your consent |
| Security / technical | IP address (stored as a hash for spam-limiting; also included in plain text in the internal email notification of your enquiry, to identify abusive senders), date/time of request | collected automatically when you submit the form |
3. Purposes and lawful basis
- Responding to enquiries (form) — basis: steps prior to a contract / our legitimate interest in replying (Art. 6(1)(b) and (f) UK GDPR).
- Analytics and improving the site (Google Analytics) — basis: your consent (Art. 6(1)(a) UK GDPR), which you can withdraw at any time.
- Security and abuse prevention (anti-spam, rate-limiting) — basis: legitimate interest (Art. 6(1)(f) UK GDPR).
4. Cookies and similar technologies
We use only strictly necessary cookies (site operation, remembering your cookie choice) and, only with your consent, analytics cookies (Google Analytics 4), as required by PECR. The banner lets you accept or reject. You can change your choice at any time via the "Cookie settings" link in the site footer.
5. Who we share data with (recipients)
- Google Ireland Ltd. / Google LLC — Google Analytics 4 (only if you accept analytics cookies).
- Namecheap, Inc. — hosting the site and sending form emails.
We do not sell or rent your data.
6. International transfers
Google may process data outside the UK (e.g. the USA). Such transfers are protected by UK adequacy regulations (UK Extension to the EU-US Data Privacy Framework) and/or the UK International Data Transfer Agreement (IDTA) / Addendum to the EU Standard Contractual Clauses.
7. How long we keep data
- Form enquiries: 24 months from your last interaction.
- Google Analytics data: for the period set in the account (default up to 14 months).
- Anti-spam IP hashes: a maximum of 24 hours.
- The IP address in the email notification: for as long as we keep that enquiry (see above).
8. Your rights
Under the UK GDPR you have the right to: access, rectification, erasure, restriction of processing, data portability, object, and to withdraw consent at any time (without affecting the lawfulness of prior processing). To exercise them, contact info@gfsrailprojects.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; 0303 123 1113; ico.org.uk.
9. Data security
The site uses encrypted connections only (HTTPS). Email credentials are stored outside public access, and the form has anti-spam protections. We apply reasonable technical and organisational measures to protect your data.
10. Children
This site is not directed at children under 13, and we do not knowingly collect their data.
11. Changes
We may update this policy. The current version, with its update date, is always published on this page.
12. Contact
Ground Force Solutions Ltd (GFS Rail Projects) · info@gfsrailprojects.co.uk · 07463 768 492.