1. Who We Are
Integrated Living is a Birmingham-based IT services company operated by Abdul Wajid Attari. We provide web development, IT support, smart home installation, CCTV, network design, and data recovery services.
2. What Data We Collect
We collect different types of data depending on how you interact with our website:
Data you provide directly
- Chat widget: Name, phone number, email address (optional), and your chat conversation when you submit a lead enquiry
- Contact form: Name, email address, phone number (optional), enquiry type, and your message
Data collected automatically
| Data | Purpose | Storage |
|---|---|---|
| IP address (hashed) | Rate limiting and abuse prevention | Stored as an irreversible SHA-256 hash — we cannot identify you from this |
| Browser type / user agent | Recorded with lead submissions for troubleshooting | Server database |
| Page URL | Recorded with lead submissions so we know which page you were on | Server database |
| Visitor ID (UUID) | Recognise returning visitors to improve your experience (only if you accept cookies) | Your browser (localStorage) and our server |
| Analytics (Umami) | Anonymous, cookieless page view analytics | Self-hosted, no personal data collected |
3. Cookies and Local Storage
We ask for your consent before storing any data in your browser. If you click Accept on our cookie banner, the following is stored:
| Key | Type | Purpose | Duration |
|---|---|---|---|
| ilc_consent | localStorage | Records that you accepted cookies | Until you clear browser data |
| ilc_visitor_id | localStorage | Unique ID to recognise you as a returning visitor | Until you clear browser data |
| ilc_conversation | sessionStorage | Your current chat conversation (so it persists if you navigate pages) | Until you close the browser tab |
| ilchat_exp_* | Cookie | A/B testing assignment (which variant of the chat experience you see) | 30 days |
If you click Decline, no cookies or localStorage values are set (except sessionStorage for basic chat functionality). You can still use the chat widget — you just won't get the personalised returning visitor experience.
4. How We Use Your Data
We use your data to:
- Respond to your enquiry — when you submit a lead or contact form, we use your name, phone, and email to get back to you
- Send email notifications — we receive an email alert when a new lead comes in so we can respond promptly
- Build your WhatsApp link — if you choose to continue on WhatsApp, we pre-fill a message with your name and reference number
- Improve your experience — if you consent, we remember your previous visits and show you relevant content
- Prevent abuse — rate limiting stops automated spam submissions
- Test improvements — A/B testing helps us understand which chat experiences work best (anonymous, no personal data used)
5. Who We Share Your Data With
We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be processed by:
- Hostinger — our web hosting provider (servers in the EU)
- Cloudflare — CDN and security (processes requests but does not store personal data)
- WhatsApp / Meta — only if you choose to continue your conversation on WhatsApp
6. Data Retention
- Lead data (name, phone, email, transcript) — retained until you request deletion or we determine it is no longer needed
- Visitor history — last 5 conversations, automatically purged after 90 days
- Rate limiting records — automatically expire when their time window passes
- A/B test data — conversion data is anonymous (visitor UUID only, not linked to your name)
7. Your Rights (UK GDPR)
Under the UK General Data Protection Regulation, you have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restrict processing — ask us to limit how we use your data
- Data portability — receive your data in a machine-readable format
- Object — object to our processing of your data
- Withdraw consent — withdraw cookie consent at any time by clearing your browser data
To exercise any of these rights, email us at [email protected] with the subject line "Data Request". We will respond within 30 days.
8. Data Security
We take reasonable measures to protect your data:
- All data is transmitted over HTTPS (encrypted in transit)
- IP addresses are stored as salted SHA-256 hashes (irreversible)
- Admin access is protected by bcrypt-hashed passwords with session timeouts
- Rate limiting and honeypot fields prevent automated abuse
- Lead data can be exported and permanently deleted from the admin panel (GDPR compliance)
9. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through our chat widget, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will be changed accordingly. We encourage you to review this page periodically.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data:
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).