Privacy policy

Who we are

Sun Cloud Stack is the trading name of Charlie Sun, a sole trader providing DevOps, cloud and infrastructure consultancy and managed services. In this policy, "we", "us" and "our" mean Charlie Sun trading as Sun Cloud Stack.

We are the controller of the personal data described in this policy. You can contact us at enquiries@suncloudstack.com.

This policy covers personal data we collect through this website, by email and phone, and in running our business with clients and suppliers. When we work inside a client's systems, we usually process personal data on that client's behalf as its processor, and the client's own privacy notice covers that data.

Personal data we collect

• Enquiry details: your name, email address, and optionally your phone number and company, the cloud platform and type of help you select, and the content of your messages when you contact us.
• Client and supplier contacts: names, job titles, business contact details and correspondence of the people we deal with at clients, prospective clients and suppliers.
• Contract and billing records: contracts, statements of work, invoices, payment records and the bank details you give us for payments.
• Meeting records: calendar invitations and, only where you agree in advance, meeting recordings or transcripts.
• Website data: our hosting provider processes technical information such as your IP address, browser type and the pages requested, so the site can be delivered and protected from abuse. We also use Cloudflare Web Analytics, which counts page views and measures page performance without cookies and without tracking you across other websites.

We do not intend to collect special category data, and we do not knowingly collect data about children.

How we use it and our lawful bases

• Responding to enquiries and preparing quotes and proposals: our legitimate interests in responding to business enquiries, or taking steps at your request before entering into a contract.
• Delivering services and managing contracts: performance of a contract with you, or our legitimate interests where the contract is with your employer.
• Invoicing, taking payment and keeping accounts: compliance with our legal obligations under tax and accounting law, and performance of a contract.
• Sending occasional updates about our services to business contacts: our legitimate interests, or your consent where the law requires it. You can opt out at any time.
• Understanding how the website is used, keeping our systems and your information secure, and establishing or defending legal claims: our legitimate interests.

Who we share it with

We use service providers that process personal data for us under contract, including:

• Cloudflare, which hosts this website, protects it from attacks, provides website analytics and delivers contact form messages to us
• Google Workspace, for email, documents and storage
• our accounting software, bank and e-signature providers

We may also share personal data with our accountant, insurers and legal advisers, with HMRC and other authorities where the law requires it, and with a successor business if our business is transferred or incorporated. We do not sell personal data.

International transfers

Some of our service providers, including Cloudflare and Google, may process personal data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the International Data Transfer Agreement or Addendum issued by the ICO.

How long we keep it

• Enquiries that do not lead to work: up to two years after our last contact.
• Client and supplier records, contracts and invoices: six years after the contract ends, to meet tax, accounting and legal claim requirements.
• Marketing contacts: until you opt out, after which we keep a minimal record so we do not contact you again.

Cookies

We do not set any cookies, and our analytics does not use cookies or similar storage on your device. Cloudflare may set a strictly necessary security cookie to tell real visitors apart from automated attacks. The law does not require consent for strictly necessary cookies.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent where we rely on consent. You have an absolute right to object to direct marketing.

To use any of these rights, email enquiries@suncloudstack.com. We will respond within one month. For complex requests we may extend this by up to two further months, and we will tell you if we do.

Complaints

If you are unhappy with how we have handled your personal data, email us first at enquiries@suncloudstack.com with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you informed of progress and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Security

We protect personal data with multi-factor authentication, encrypted devices and storage, least-privilege access and regular software updates. This website is served over encrypted connections only, and enquiries sent through the form go straight to our business email rather than being stored on the website.

Changes to this policy

We update this policy when our practices change. The date at the top shows when it was last updated.