1. Who We Are
Integrated Living is a trading name of Wajid Bashir, a sole trader based in Birmingham, United Kingdom. We provide web development, IT support, smart home installation, CCTV, network design, and data recovery services.
Data Controller: Wajid Bashir, sole trader, trading as Integrated Living
Privacy contact: [email protected]
Location: Birmingham, United Kingdom
2. What Data We Collect
We collect different types of data depending on how you interact with our website:
Data you provide directly
- Chat widget: Name, phone number, email address (optional), and your chat conversation when you submit a lead enquiry
- Contact form: Name, email address, phone number (optional), enquiry type, and your message
Data collected automatically
| Data | Purpose | Storage |
|---|---|---|
| IP address (hashed) | Rate limiting and abuse prevention | Stored as an irreversible SHA-256 hash, so we cannot identify you from this |
| Browser type / user agent | Recorded with lead submissions for troubleshooting | Server database |
| Page URL | Recorded with lead submissions so we know which page you were on | Server database |
| Visitor ID (UUID) | Recognise returning visitors to improve your experience (only if you accept cookies) | Your browser (localStorage) and our server |
| Analytics (Umami) | Anonymous, cookieless page view analytics | Self-hosted, no personal data collected |
3. Cookies and Local Storage
We ask for your consent before storing any data in your browser. If you click Accept on our cookie banner, the following is stored:
| Key | Type | Purpose | Duration |
|---|---|---|---|
| ilc_consent | localStorage | Records that you accepted cookies | Until you clear browser data |
| ilc_visitor_id | localStorage | Unique ID to recognise you as a returning visitor | Until you clear browser data |
| ilc_conversation | sessionStorage | Your current chat conversation (so it persists if you navigate pages) | Until you close the browser tab |
| ilchat_exp_* | Cookie | A/B testing assignment (which variant of the chat experience you see) | 30 days |
If you click Decline, no cookies or localStorage values are set (except sessionStorage for basic chat functionality). You can still use the chat widget; you just won't get the personalised returning visitor experience.
4. How We Use Your Data
We use your data to:
- Respond to your enquiry: when you submit a lead or contact form, we use your name, phone, and email to get back to you
- Send email notifications: we receive an email alert when a new lead comes in so we can respond promptly
- Build your WhatsApp link: if you choose to continue on WhatsApp, we pre-fill a message with your name and reference number
- Improve your experience: if you consent, we remember your previous visits and show you relevant content
- Prevent abuse: rate limiting stops automated spam submissions
- Test improvements: A/B testing helps us understand which chat experiences work best (anonymous, no personal data used)
5. Who We Share Your Data With
We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be processed by:
- Hostinger: our web hosting provider (servers in the EU)
- Cloudflare: CDN and security (processes requests but does not store personal data)
- WhatsApp / Meta: only if you choose to continue your conversation on WhatsApp
- Google: Google Tag Manager loads from Google servers, which receive your IP address and browser details. Our typefaces are hosted on our own server, so no font requests go to Google. Our Tag Manager container currently runs no analytics, advertising or tracking tags.
5A. Sub-processors
We use selected sub-processors to deliver parts of our service under data protection safeguards.
| Sub-processor | Purpose | Data involved | Region |
|---|---|---|---|
| Hostinger | Web hosting and infrastructure | Website and form data | EU/UK |
| Umami (self-hosted) | Website analytics | Anonymous usage metrics | EU/UK |
| WhatsApp (Meta) | Optional visitor handover | Details/messages you choose to share | Global |
| Cloudflare | Content delivery and security | IP address, request details | Global (US company) |
| Google (Fonts, Tag Manager) | Typefaces; tag container (no tracking tags) | IP address, browser details | US |
5B. Legal Basis and International Transfers
We handle chat and enquiry data to respond to you and, where you become a customer, to perform our contract with you. Hosting, security, fonts and anonymous analytics are based on our legitimate interest in running a secure, working website. Cookies and browser storage are used only with your consent (see section 3).
Some providers above are based in the United States. Cloudflare is covered by the UK-US Data Bridge and the UK International Data Transfer Addendum. Google participates in the UK Extension to the EU-US Data Privacy Framework for the relevant personal information. Hostinger stores data in the EU, which the UK recognises as providing adequate protection.
6. Data Retention
- Lead data (name, phone, email, transcript): retained until you request deletion or we determine it is no longer needed
- Visitor history: last 5 conversations, automatically purged after 90 days
- Rate limiting records: automatically expire when their time window passes
- A/B test data: conversion data is anonymous (visitor UUID only, not linked to your name)
7. Your Rights (UK GDPR)
Under the UK General Data Protection Regulation, you have the right to:
- Access: request a copy of all personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: ask us to delete your data ("right to be forgotten")
- Restrict processing: ask us to limit how we use your data
- Data portability: receive your data in a machine-readable format
- Object: object to our processing of your data
- Withdraw consent: withdraw cookie consent at any time by clearing your browser data
To exercise any of these rights, email us at [email protected] with the subject line "Data Request". We will respond within one month.
8. Data Security
We take reasonable measures to protect your data:
- All data is transmitted over HTTPS (encrypted in transit)
- IP addresses are stored as salted SHA-256 hashes (irreversible)
- Admin access is protected by bcrypt-hashed passwords with session timeouts
- Rate limiting and honeypot fields prevent automated abuse
- Lead data can be exported and permanently deleted from the admin panel (GDPR compliance)
9. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through our chat widget, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will be changed accordingly. We encourage you to review this page periodically.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data:
12. Complaints About How We Use Your Data
If you are unhappy with how we have handled your personal data, please email [email protected] with the subject line "Complaint". We acknowledge receipt within 30 days, take appropriate steps to investigate without undue delay, keep you informed, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO) (ico.org.uk, 0303 123 1113), but we would appreciate the chance to put things right first.