Fernley.

Legal

Privacy policy

This policy explains how information is handled when you visit fernley.co or contact us about our services.

Last updated:

Fernley is the brand under which this website and the services described on it are presented. We operate from Guangzhou, China. Questions about this policy and requests concerning personal information can be sent to contact@fernley.co.

This policy covers website visits and initial enquiries. If an engagement requires additional information or different processing arrangements, these will be explained separately before that information is collected.

The enquiry form collects your name, email address, service of interest and message. It also records the selected language, submission time, an enquiry reference, processing status and a record of your privacy and international-processing consents so that we can receive and follow up your request. Name, email address and enquiry details are required to submit the form; the service selection is optional.

If you contact us by email or WhatsApp, we receive the contact details, messages and other information you choose to provide through that channel. You may browse the website without submitting an enquiry. Without a means of contacting you, we may be unable to respond.

Please limit an initial enquiry to the information needed to explain your requirements. Do not send identity documents, account passwords, payment details, health information or confidential material belonging to another party through the form. If sensitive or confidential material is needed later, we will agree an appropriate method of exchange.

We use enquiry information to understand your requirements, assess whether we can assist, reply to you and keep a proportionate record of the discussion. Technical information is used to deliver the website, prevent abuse and investigate operational or security problems. We may also retain information where necessary to meet a legal obligation or establish, exercise or defend a legal claim.

Where consent is required, we ask for it before the relevant processing. You may withdraw consent by contacting us; withdrawal does not affect processing lawfully carried out beforehand. Where the applicable law permits another basis, processing may be necessary for steps you request before an agreement, our legal obligations, or the proportionate operation and security of this website.

Submitting an enquiry does not subscribe you to marketing communications. We do not sell enquiry information, use it for advertising profiles or make decisions producing legal or similarly significant effects solely by automated processing.

Your browser stores language and display-theme preferences in local storage under portfolio-language and portfolio-theme. These preferences remain on your device until changed or removed. You can clear them through your browser settings; doing so resets the saved choices.

Cloudflare Web Analytics provides aggregated information about website use and page performance without advertising cookies. This is used to understand whether pages work properly and where the website can be improved. We do not use advertising trackers or cross-site advertising profiles.

Cloudflare hosts and protects the website. Network requests necessarily involve technical information such as an IP address, request time, browser information and the requested page. The enquiry form also uses Cloudflare Turnstile to distinguish genuine submissions from automated abuse. Turnstile processes browser and device signals for that security check; this website does not enable its optional pre-clearance cookie.

Cloudflare provides the website infrastructure, form processing, D1 database and security checks. Website enquiries are saved in that database and do not generate an email notification. If you contact contact@fernley.co directly, that correspondence is handled through Zoho Mail. Information is made available only as needed for those functions, responding to the enquiry or the legal purposes described above.

Cloudflare, Inc. can be contacted about its privacy practices at privacyquestions@cloudflare.com. Zoho provides information about its data handling and privacy contact in its privacy policy. A provider may also process information for its own security or legal purposes as described in its own notice.

If you follow a WhatsApp or other external link, the destination service receives your visit or message under its own terms and privacy arrangements. An external link does not mean that we control that service.

The website uses international infrastructure. The enquiry database is configured with an Asia Pacific location hint; this is not a guarantee of a particular country or storage within mainland China. Information may be processed through Cloudflare systems outside mainland China and accessed from Guangzhou when we respond to an enquiry. Different countries may apply different data-protection rules.

Where an international transfer requires additional information, a separate consent or another legal safeguard, the relevant arrangement must be provided before that transfer. This policy and acceptance of the website terms do not themselves replace any separate consent or safeguard required by law.

Initial enquiry information is kept only while needed to handle the request. Database records expire 365 days after submission and are removed by a daily deletion process; earlier deletion may be requested. If an enquiry leads to an engagement, or specific records are needed for a legal obligation or dispute, the necessary information is retained under the relevant engagement or legal requirements instead.

Direct enquiry correspondence is reviewed separately and deleted when no longer needed for follow-up, an engagement or a legal purpose. The database expiry process does not delete email copies automatically. Provider backups and security records may follow their own limited retention cycles. Information retained solely because deletion is temporarily impracticable is kept restricted and is not reused for another purpose.

We use reasonable technical and organisational measures to protect information, including encrypted website connections and restricted access to enquiry records. No internet service can guarantee absolute security. If a personal-information incident occurs, we will take appropriate action and provide notifications where the applicable law requires them.

You can contact contact@fernley.co to ask what personal information we hold about you, obtain a copy, correct an inaccuracy, request deletion, or ask us to explain or restrict its use. Where the applicable law provides them, you may also have rights to object to processing or request a transfer of your information. Rights can depend on the purpose and legal basis of the processing.

Please provide enough information for us to locate the relevant enquiry. We may ask for proportionate information to verify a request and protect someone else’s information. We will respond within the period required by the applicable law and explain any lawful reason for declining all or part of a request. You may also complain to the relevant data-protection authority or use any other remedy available to you.

This website is intended for business enquiries and is not directed at children. Please do not submit personal information about a child. If such information is sent to us inadvertently, contact us so that we can review and remove it as appropriate.

We may update this policy when the website or its processing arrangements change. The date above identifies the current version. If a change requires a new notice or consent, we will provide it before the relevant new processing begins.