Privacy Policy

This policy explains what personal data of/fair network (“of/fair”, “we”, “us”) collects through the website of-fair.com, why, how long we keep it, and the rights you have. We have tried to keep it short and accurate: it describes what this website actually does today.

1. Who is responsible for your data

of/fair network is the controller of the personal data described in this policy. You can reach us about anything here at [email protected].

This policy covers of-fair.com only. The partner dashboard at app.of-fair.com and the services we provide to partners are governed by their own agreements and notices.

2. What we collect

When you contact us

The “Start free” form asks for your name, company, work email and the address of your app or website, and lets you add an optional message. The form does not send your details to a server. When you submit it, it opens your own email application with a message prepared for us, and the details are only sent if you then send that email. We receive what you send, together with the technical information every email carries, such as your email address.

Technical data our hosting provider processes

When you load a page, our hosting and content delivery provider receives standard connection data, including your IP address, the page requested, date and time, and browser and device information. This is used to deliver the site, keep it secure and prevent abuse. We do not use it to build profiles of visitors.

Privacy-focused website statistics

We use Cloudflare Web Analytics to see, in aggregate, how the site is used and how fast it loads, for example which pages are viewed, the referring site, the type of browser or device, the approximate country and page performance. Cloudflare states that this tool does not use cookies or local storage, and does not use them to track you across other websites or to build profiles of individuals. It runs from a script served by Cloudflare (static.cloudflareinsights.com), so your browser connects to Cloudflare when a page loads. You can object at any time by emailing us, and blocking that address in your browser or an ad blocker also prevents it.

What we do not do

• We do not set cookies on this website, and we do not use advertising or tracking cookies.
• We do not load third-party advertising scripts. Apart from the Cloudflare statistics tool above, no other third-party tools run on this site. Fonts are hosted by us.
• We do not sell personal data, and we do not share it for cross-context behavioural advertising.
• We do not collect sensitive personal data, and we do not make decisions about you by automated means.

3. Why we use your data and our legal basis

Purpose	Legal basis (EU and UK GDPR)
Reply to your enquiry, arrange a call and set up a free test you have asked for	Steps taken at your request before a contract, and our legitimate interest in running our business (Article 6(1)(b) and (f))
Understand in aggregate how the site is used and measure its performance	Our legitimate interest in running and improving our website (Article 6(1)(f)). You may object at any time
Keep the website secure, reliable and free from abuse	Our legitimate interest in the security of our service (Article 6(1)(f))
Meet legal obligations and handle legal claims	Legal obligation, and our legitimate interest (Article 6(1)(c) and (f))
Optional cookies or similar tools, if we ever introduce them	Your consent (Article 6(1)(a)), which you can withdraw at any time

4. Who we share data with

We share personal data only where needed and only with:

• service providers that act on our instructions, such as our website hosting and content delivery provider and our email provider;
• professional advisers, such as lawyers and accountants, under a duty of confidentiality;
• authorities or other parties where the law requires it or to protect our legal rights.

5. Transfers outside your country

Our providers may process data in countries outside the European Economic Area, the United Kingdom or Switzerland, including the United States. Where that happens we rely on an approved transfer mechanism, such as the European Commission’s Standard Contractual Clauses, the UK addendum or an adequacy decision, as applicable.

6. How long we keep it

We keep enquiry details for as long as needed to handle your request and any relationship that follows. If no relationship results, we delete or anonymise them, normally within 24 months of our last contact. Connection data held by our hosting provider is kept for the short period set by that provider.

7. Your rights

If the EU or UK GDPR applies to you, you have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased in the circumstances the law provides;
• restrict how we use your data in certain cases;
• receive your data in a portable format where the law applies;
• object to our use of your data that is based on legitimate interests;
• withdraw consent at any time, where we rely on it, without affecting earlier use.

You also have the right to complain to a data protection authority, for example in the country where you live or work. In the UK this is the Information Commissioner’s Office. We would appreciate the chance to put things right first, so please contact us.

If you live in California or another US state with a privacy law

You may have the right to know what personal information we collect and use, to request deletion or correction, to opt out of the sale or sharing of personal information, and not to be treated unfairly for using these rights. In the past 12 months we have collected identifiers (name, email address, IP address), professional information (company and the app or website you tell us about) and internet activity limited to server connection data. We collected it from you and from your browser, and used it for the purposes in section 3. We do not sell or share personal information, so there is nothing to opt out of, and we treat a Global Privacy Control signal from your browser as an opt-out request.

To use any right, email [email protected]. We may need to verify your identity before acting, and you may use an authorised agent. We respond within one month (or the shorter or longer period your local law sets).

8. Children

This website is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us data, contact us and we will delete it.

9. Security

The site is served over HTTPS with modern security headers, and we limit access to enquiry details to people who need them. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your data.

10. Cookies and similar technologies

This website currently sets no cookies. It uses Cloudflare Web Analytics, which Cloudflare states does not use cookies or local storage. See our Cookie Policy for details and for how to manage your choices.

11. Links to other sites

Our site may link to other websites, such as our partner dashboard. We are not responsible for their privacy practices, so please read their notices.

12. Changes to this policy

We will update this policy if what we do changes, for example if we add analytics. The date at the top shows when it was last updated.

13. Contact

Questions or requests about this policy: [email protected].