Who controls the information
Miftah Digital Ltd provides the website, automation and digital operations services described on this website. Privacy enquiries can be sent to hello@miftahdigital.co.uk.
Information collected
The website enquiry form collects your name, business name, email address, optional telephone number, selected service and the information you include in your message. A Local Growth request also asks for your business website, priority service and area.
Why the information is used
The information is used to review and respond to your request, discuss a potential service, prepare a proposal and keep a record of the communication. It is not sold to third parties.
Legal basis
Enquiry information is processed because it is necessary to respond to your request and, where relevant, to take steps before entering into a contract. Limited records may also be retained for legitimate business administration and legal obligations.
Storage and retention
Enquiry records are stored within the secured website operations system. Internal notes and client records are restricted to Miftah Digital's owner workspace. Released project updates are shared with the relevant client through an unlisted private link; anyone holding that link can read those updates and submit a reply. Keep it private and contact us if it needs replacing. Records that do not lead to a working relationship will normally be deleted within 12 months unless a legal or operational reason requires longer retention.
Service providers
Technical providers process limited information to host and operate the website. When transactional email is active, Resend processes the information needed to notify Miftah Digital and acknowledge your enquiry. These providers act under their own security and privacy obligations.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or transfer of your personal information, or object to its use. You may also complain to the UK Information Commissioner’s Office.
Enquiry sources and website measurement
You may optionally tell us how you found us. When you follow a service or guide enquiry link, the public page leading to the form may be saved with your enquiry. This helps us understand which services and pages generate useful enquiries. Campaign links may include the platform, campaign, video or creative label, placement and ad identifiers. These labels stay in links as you navigate public pages and are saved with the enquiry only when you submit the form. We do not use campaign cookies, browser storage, individual click IDs or browsing-history records for this intake. A tagged link indicates the link used, not proof that you watched an advert. Your optional answer about how you found us is recorded separately.
Initial website checks and form protection
A Local Growth request starts an automated review of the supplied public website and creates internal review tasks. Miftah Digital checks the observations before giving advice or agreeing delivery work. The check does not change your website. To protect the form against abuse, temporary rate-limit records use hashes of the supplied email address and, when available, the network address. These limits expire after two hours and expired records are removed as new requests are processed.
Aggregate page counts
We count successful public document loads by date and page, without storing visitor identifiers, IP addresses, full referrers or URL query strings in these counters. These are aggregate counts, not unique-visitor tracking. Known bots, prefetches, recognised owner sessions and requests expressing Do Not Track or Global Privacy Control are excluded. You can exclude this browser from these counts using Analytics preferences in the footer.
Optional Google Analytics
If you choose Allow analytics, Google Analytics 4 uses first-party cookies to measure visits, sessions, public page views and successful enquiry submissions. Google receives technical information about your browser and device and a sanitised page URL and referring domain. Recognised campaign labels, including a ChatGPT or other AI-assistant source, may also be sent after consent; arbitrary query values and AI conversation text are not sent. We do not send enquiry text, names, email addresses, telephone numbers, URL query strings or private dashboard pages to Analytics. Advertising personalisation and Google Signals are disabled.
Analytics is off until you consent, and stays off when your browser expresses Do Not Track or Global Privacy Control. You can withdraw permission through Analytics preferences in the footer; this stops future collection and removes this site’s Analytics cookies. Your preference and Analytics cookies expire after six months. Historical information already collected is not automatically erased by changing your browser choice. Google processes Analytics information under its own terms and may process data internationally; see Google’s privacy policy.
Consent choices are saved in essential preference cookies. The private owner dashboard uses essential authentication technology when the owner signs in.