Fluffy Piggy. We code like pigs in space.

Bold apps, brilliant websites, and backends smoother than a buttered piglet.
Built with heart, humour, and damn good engineering.

Policies

Privacy Policy (UK GDPR / DPA 2018)

Last updated: 13 June 2025

1. Who We Are

We are Fluffy Piggy Ltd, company registration number: 16482127, based at: 43 Crayford Road, Derby, Alvaston, DE24 0HL, United Kingdom. You can contact us at: contact@FluffyPiggy.com

2. What Data We Collect

We may collect and process the following personal data:

  • Full name, email address, phone number
  • Login credentials (if you create an account)
  • Technical data: IP address, browser type, operating system
  • Analytics data from tools such as Google Analytics
  • Data submitted via contact forms
  • Customer and end-user data - if you or your organisation use our software

3. How We Obtain Your Data

  • Directly from you - when you contact us, create an account, or use our services
  • From our clients - when we process data on their behalf as an IT provider
  • Automatically - via cookies and analytics when you visit our website

4. Compliance with Data Protection Law

Fluffy Piggy Ltd is fully committed to complying with the UK GDPR and the Data Protection Act 2018. We process personal data only on lawful bases, including:

  • Consent (where you have given clear consent for us to process your personal data for a specific purpose),
  • Contractual necessity (processing necessary to perform a contract with you),
  • Legal obligation (where we are required by law to process your data),
  • Legitimate interests (where processing is necessary for our legitimate interests and does not override your rights).

We respect and uphold the rights of data subjects under UK GDPR. You have the right to:

  • Access your personal data we hold,
  • Request correction of inaccurate or incomplete data,
  • Request deletion of your personal data ("right to be forgotten"),
  • Restrict or object to the processing of your data,
  • Request portability of your data,
  • Withdraw your consent at any time, where applicable.

If you have any questions regarding our data protection practices or wish to exercise any of your rights, please contact us at: contact@FluffyPiggy.com. We have designated a person responsible for data protection matters. You can contact them at contact@FluffyPiggy.com for any questions or to exercise your rights.

5. Why We Process Data (Legal Basis)

  • To provide services - based on a contract or to enter into one
  • To respond to inquiries and provide support - legitimate interest
  • To analyse and improve services - with your consent (e.g. Google Analytics)
  • To meet legal obligations - e.g. accounting, legal protection
  • For marketing purposes - only with your explicit consent, in accordance with PECR

6. Who We Share Data With

  • Our employees and subcontractors (e.g. developers, IT partners)
  • Service providers such as Google (Analytics, Firebase), Amazon Web Services (AWS)
  • Public authorities if legally required
  • Clients - if we process data on their behalf (as data processors)

7. Where We Store Data

Data may be stored on servers in the UK, the European Union, or the USA (e.g. AWS, Firebase). For transfers outside the UK/EEA, we implement appropriate safeguards such as standard contractual clauses under the UK GDPR and conduct transfer risk assessments where required.

8. Data Retention

We retain personal data in accordance with our Data Retention Policy.

9. Cookies & Analytics

We use cookies to improve site functionality and analyse traffic via Google Analytics. You can manage cookies through your browser settings. For more details, see our Cookie Policy.

10. Data Security

We apply appropriate technical and organisational measures to protect your data, including encryption, access control, and regular system reviews. Details can be found in our Data Security Policy.

11. Email Communication and Anti-Spam Policy

Fluffy Piggy Ltd commits to sending marketing emails only to individuals who have given their explicit consent in accordance with PECR regulations. Every email contains an easy-to-use link allowing recipients to unsubscribe from future communications at any time. We do not tolerate or support any form of spam or unsolicited messages.

12. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal information from a child without verified parental consent, we will delete that information promptly.

13. Changes to This Policy

We reserve the right to update this policy. The updated version will be published on this page with a new "last updated" date.

Terms of Use

Last updated: 13 June 2025

1. General Information

These Terms of Use ("Terms") apply to the website www.fluffypiggy.com and all related applications and services provided by Fluffy Piggy Ltd, located at: 43 Crayford Road, DE24 0HL, Derby, Alvaston, United Kingdom, registered with Companies House under number 16482127 ("we", "us", "our"). By using our website, applications, or services ("Services"), you ("You", "User") confirm that you have read and accepted these Terms. If you do not agree with any part of these Terms, please stop using our Services.

2. Intellectual Property

All content made available through our Services, including source code, logos, designs, text, graphics, and other materials, is the property of Fluffy Piggy Ltd or our licensors and is protected by copyright and intellectual property laws.

Upon full payment, Clients receive a non-exclusive, non-transferable license to use the delivered solution for its intended purpose. Modification or redistribution of the delivered solution requires prior written consent.

You are permitted to:

  • View and print content for personal, non-commercial use only.

You are prohibited from:

  • Copying, modifying, distributing, or commercially exploiting any content,
  • Using our trademarks without written permission.

3. Scope of Services

Fluffy Piggy Ltd offers development and delivery of:

  • Mobile applications (iOS, Android)
  • Websites and e-commerce stores
  • Backend systems (RESTful APIs)
  • SaaS solutions

We do not grant users or clients any rights to the source code by default, unless otherwise agreed in writing.

In case of a separate written agreement with a client (e.g., for custom development), these Terms may be supplemented or overridden accordingly.

Unless explicitly agreed in a separate written contract, Clients do not acquire any rights to the source code of delivered websites, applications, or APIs. All code remains the property of Fluffy Piggy Ltd.

4. Limitation of Liability

Our Services are provided "AS IS", without any warranties, express or implied. We do not guarantee that:

  • The Services will be error-free,
  • The Services will always be available,
  • The Services will meet your expectations.
  • Functionality of third-party services integrated with our solutions (e.g., payment gateways, social media APIs).

We are not liable for:

  • Direct or indirect damages,
  • Loss of data, income, reputation, or third-party actions.

5. Personal Data & Security

When using our Services, you may be asked to provide personal data. Please refer to our Privacy Policy to learn how we process your data.

We use third-party tools and services (including Google Analytics, Firebase, AWS), and we may store end-user data (e.g. user account details) on our servers. We are committed to protecting this data in accordance with applicable laws.

6. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the content, privacy policies, or practices of these external sites.

7. Changes to These Terms

We may update these Terms at any time without prior notice. The updated version will be published on this page, and continued use of the Services indicates acceptance of the new Terms.

8. Governing Law & Jurisdiction

These Terms are governed by the laws of England and Wales. Any disputes arising from the use of the Services will be resolved by the courts located in Derby, United Kingdom.

9. Software License Terms

9.1 Grant of License

Fluffy Piggy Ltd grants you a non-exclusive, non-transferable license to use the software solely for its intended purpose.

9.2 Restrictions
  • No copying, modifying, or redistributing the software without written permission.
  • Reverse engineering or attempting to extract source code is strictly prohibited.
9.3 Termination

The license terminates automatically if you breach these terms or upon contract expiration.

Contact: contact@FluffyPiggy.com

Data Security Policy

Last updated: 13 June 2025

1. Introduction

Fluffy Piggy Ltd places the highest importance on the security of personal data and other information entrusted to us by our clients and users of our services.

2. Purpose of the Policy

To ensure appropriate technical and organisational measures are in place to protect data against unauthorised access, loss, alteration, or disclosure.

3. Security Measures

  • Encryption of data during transmission and storage (e.g., Transport Layer Security, AES-256)
  • Access control - only authorised personnel have access to data
  • Regular security audits and testing of applications and servers
  • Secure password management and multi-factor authentication (MFA)
  • Data backups stored in secure locations
  • Incident response procedures

4. Responsibility

All employees and contractors of Fluffy Piggy Ltd are required to comply with this security policy and maintain the confidentiality of all data.

Data Processing Agreement (DPA)

Last updated: 13 June 2025

1. Introduction

This agreement is entered into between Fluffy Piggy Ltd (the "Processor") and the Client (the "Data Controller").

2. Subject of the Agreement

The Processor shall process personal data solely on the instructions of the Data Controller, for the purpose of providing development, hosting, and IT support services.

3. Obligations of the Processor

  • Process personal data in accordance with applicable data protection laws, including the UK GDPR.
  • Implement appropriate technical and organisational measures (as outlined in the Data Security Policy).
  • Not disclose personal data to unauthorised third parties, unless required by law.
  • Cooperate with the Data Controller in fulfilling data subject rights requests.
3.1 Client's Obligations

The Client warrants that:

  • It has a lawful basis for sharing personal data with the Processor,
  • End-users are informed of the Processor's role in privacy notices.

4. Subprocessing

The Processor may engage subprocessors (e.g., Google Firebase, AWS, or other service providers) only after informing the Data Controller and allowing 14 days for objection. All subprocessors are bound by agreements ensuring data protection standards equivalent to those set forth in this Agreement. All subprocessors must comply with UK GDPR standards. The Processor shall remain fully liable for the acts and omissions of any subprocessor.

5. Data Retention Period

Personal data will be processed only for the duration necessary to fulfil the agreement or in accordance with the Data Controller's instructions.

6. Incidents and Breaches

The Processor agrees to notify the Data Controller of any personal data breaches within 72 hours of becoming aware, providing details of the breach and mitigation actions.

7. Audits

Client may request an audit once per year, with at least 30 days' notice. Audits are limited to reviewing relevant documentation and records related to the processing of personal data. Audits must be conducted by a mutually agreed independent third party. If the parties cannot agree on a third-party auditor, each party may propose one, and the Processor shall not unreasonably withhold consent. Unless otherwise agreed, the Client shall bear the reasonable costs of the audit.

Data Retention Policy

Last updated: 13 June 2025

1. Retention Overview

Fluffy Piggy Ltd retains personal data only for as long as necessary to fulfil the purposes for which it was collected.

2. Retention Periods

  • Service and app users' data: Up to 3 years from the last recorded user activity, unless legal obligations require otherwise.
  • Accounting and tax data: Minimum of 6 years, in accordance with UK tax regulations.
  • Clients and contractors' data: Until the end of cooperation + limitation period (usually 6 years).

3. Data Deletion

Once the retention period has expired, personal data is securely deleted or anonymised.

Associated Policies and Agreements

This Privacy Policy should be read in conjunction with our Terms of Use, Cookie Policy, Data Security Policy, Data Processing Agreement, and Data Retention Policy. Together, these documents form the basis of our approach to data protection and governance.