starlingWe use personal information to respond to enquiries, manage client projects and run this website. Optional analytics is off until you allow it. This website does not take payments or collect payment-card details.
1. Who we are
STARLING.DEV LTD, trading as Starling.dev. Registered in England and Wales, company number 17554849. Business correspondence: 5 Wells Road, Ilkley, United Kingdom. Email: info@starlingdev.site.
We are the controller of personal information used for our own enquiries, client relationships and website administration. This notice covers the public website and client portal. It does not replace a client's own privacy notice for a separate system we build for them.
2. What information we use
- Enquiries: your name, email, chosen service, business details and anything you choose to send us.
- Client portal: verified account ID, name and email; customer contact details; project briefs, statuses, target dates, agreed values, tasks, messages, uploaded files, read status and activity records.
- Technical information: hosting and authentication providers may handle IP addresses, browser information and security or connection logs to deliver and protect their services.
- Optional analytics: a random browser-tab identifier, time, page path, broad device category, referring domain and selected link actions. Our analytics event database does not store names, emails, IP addresses, full referring URLs, form text, project files or message contents.
Please send only information relevant to your enquiry or project. Do not upload passwords, card details or unrelated sensitive information.
3. How the enquiry form works
The public project-brief form prepares a draft in your own email application. It does not submit the typed details to us automatically. You decide whether to send the email. Downloading a brief creates a file on your device. If you send an email, we and the email services involved will process it. The signed-in portal is different: project requests, messages and files submitted there are stored on our hosted system.
4. Why we use information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to your request for a quote or service | Steps at your request before a contract, where you are the prospective customer; otherwise legitimate interests in responding to business enquiries. |
| Delivering and supporting agreed work | Performance of a contract with you; legitimate interests in managing the relationship where you represent a business customer. |
| Account access, project administration and security | Legitimate interests in operating a secure service, preventing misuse and keeping accurate business records. |
| Legal record keeping and legal requests | Compliance with legal obligations, or legitimate interests in establishing, exercising or defending legal claims, as applicable. |
| Optional website analytics | Your consent, which you can withdraw at any time. |
Providing enquiry information is voluntary, but we may not be able to respond or deliver a requested service without relevant contact and project details. We do not use this website to make decisions about you based solely on automated processing that have legal or similarly significant effects. Sending an enquiry does not sign you up to a newsletter.
5. Who may receive information
Access is limited to people who need it for the relevant purpose, including authorised Starling.dev personnel and service providers. The current portal uses ChatGPT/OpenAI for sign-in and the Sites hosting service, with Cloudflare-backed website, database and file storage. Email providers handle messages you send to our contact address. Google Fonts delivers the website's fonts and receives the technical information needed for that request. Professional advisers or authorities may receive information where needed for advice, legal duties or claims. We do not sell your personal information.
Portal project records are intended for the assigned customer account and authorised administrator. If you upload another person's information, make sure you have authority to share it and give them the relevant privacy information. Where we handle client-controlled personal information solely on a client's instructions, the client's instructions and an appropriate data-processing agreement govern that work.
6. International processing
Our hosting, authentication, font and email providers operate internationally, so information may be processed outside the UK. UK data-protection rules require an applicable adequacy arrangement, appropriate safeguards or a permitted exception for a restricted transfer. Contact us for details of the providers, processing locations and safeguards relevant to your information, or to request a copy of relevant safeguards. This notice does not mean that all information is stored in the UK.
7. How long information is kept
Our first-party analytics events are kept for a rolling 90-day period; older events are removed when new events are recorded. Your analytics preference is remembered for up to six months unless you change it or clear browser storage. The analytics session ID is held in session storage for the browser-tab session.
We keep enquiries, project records, messages and files for as long as needed to respond, deliver agreed work, provide agreed support and meet applicable business, tax and legal requirements. The period depends on whether an enquiry becomes a project, the project's duration, support commitments and any dispute or legal duty. Information needed for a claim may be kept until that matter is resolved. Unneeded records should be deleted or anonymised; contact us to request a review of specific records. There is no automatic expiry currently configured for portal projects or files. Providers may keep their own service and security records under their own retention policies.
8. Your rights and choices
Depending on the circumstances, you can request access to or a copy of your personal information, correction, deletion, restriction of processing, or transfer of information in a portable format.
Your right to object: you can object to processing based on legitimate interests because of your particular situation. You can object to use of your information for direct marketing at any time.
You can withdraw analytics consent using . Withdrawal stops future optional analytics; it does not make earlier lawful processing unlawful. To exercise other rights, email info@starlingdev.site. We may need to verify your identity and will explain any applicable limits or legal reason for retaining information.
You can complain directly to the Information Commissioner's Office (ICO), the UK's data-protection regulator. You do not have to contact us first.
9. Portal access, security and external services
Sign-in uses your verified ChatGPT account identity. Protect that account and report suspected unauthorised access promptly. We use access controls and HTTPS where available, but no online system can guarantee absolute security. Portal updates refresh periodically; email and browser push notifications are not currently enabled. External portfolio websites, authentication providers and your email application have their own policies. The website is intended for business enquiries and authorised clients, rather than children.
10. Changes and contact
We will update this notice when our processing changes and draw material changes to your attention where required. For questions or a privacy request, contact info@starlingdev.site. For browser storage details, read our Cookies & browser storage notice.