Legal

Privacy Policy

Last updated: 3 October 2026 · Version 1.2

The short version: we use the information you send us to answer your enquiry and arrange a call. A paid engagement has its own written scope and may need a separate data-handling agreement. We do not sell enquiry data or use advertising trackers on this site. You can ask us about access, correction or deletion using the contact below.

1. Who we are

The legal seller for VIPFish is Andy Jones, trading as VIPFish, a sole trader established in the United Kingdom. Andy Jones is the controller for personal data collected through this website and its enquiry route. A paid engagement's written agreement confirms the data-handling terms for that engagement. Do not send private customer records to start an enquiry.

Contact for anything in this policy: info@vipfish.ai
Address for service: 39 Parc Gellifaelog, Tonypandy, CF40 1DU, United Kingdom

2. What we collect and why

DataWhenWhy (lawful basis)
Name, email, business name and the message you sendWhen you contact usTo respond to your request and decide whether to propose work (legitimate interests, or steps towards a contract at your request)
Booking detailsVia Calendly when you schedule a callTo arrange and run the appointment (steps towards a contract at your request)
Billing detailsIf you accept a separate paid offerTo invoice, take and reconcile payment, and keep required records (contract and legal obligation)
Materials you share for a jobUnder a separate engagementTo deliver that agreed work (contract or documented client instructions, according to the data roles agreed)
Basic technical logsGenerated when the site is visitedSecurity and abuse prevention (legitimate interest)

This static website does not use advertising cookies or a third-party analytics script. If you open Calendly, its own site handles that interaction under its privacy information.

3. Payments

No payment is taken on this website. A paid offer specifies the seller and payment route. If a card link is offered, the payment provider handles card entry; please do not email card details. We may receive a payment status and billing details to reconcile the order. Payment and invoicing records are retained for six years, subject to applicable record-keeping duties.

4. Who we share data with

We do not sell or rent your personal data. Access to client material, use of AI tools and any further processors for a paid job must be addressed in the written engagement and, where needed, a data-processing agreement.

5. How long we keep it

6. Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict, or export your personal data, and you can object to processing based on legitimate interest. Email info@vipfish.ai and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO).

7. Security

Traffic to this site is encrypted using HTTPS. We agree a suitable transfer and access route before receiving private customer records or engagement materials. Access is limited to people and processors needed for the agreed work.

8. International transfers

Calendly, hosting, email and payment providers may process data outside the UK. We assess the applicable transfer mechanism and safeguards for each provider and for any separate engagement.

9. Changes to this policy

If we make material changes we will update the date at the top of this page. Significant changes affecting active clients will be notified by email.