Privacy Policy

This policy explains what the uphangar.com site collects and what it does not. It is short because the site collects very little.

1. What we do not collect

This belongs first because it has the longest reach:

• No sensitive data. We do not collect financial details, identity numbers or passwords — and we will never ask for them.
• No data selling. We do not sell or share your data with third parties for their own purposes, beyond the measurement and advertising tools described below.
• No accounts and no sign-in, therefore no passwords and no user records.

2. What we actually collect

One source: the contact form. What you send through it is what we receive: name and message (both required), and email, phone, organisation and subject if you enter them. This reaches us as an email and is not stored in a database on the site.

3. How we use it

To reply to your message and prepare whatever study or quotation you asked for, and nothing else. We do not add you to a mailing list, do not send marketing you did not ask for, and do not sell or share your data with third parties for their own purposes.

4. Measurement and cookies

The site uses measurement and advertising tools that place cookies on your device:

• Google Tag — served from our own domain through Google Tag Gateway, to measure visits and the most-viewed pages.
• Meta pixel (Facebook and Instagram) and the TikTok pixel — to measure how effective our advertising is on those platforms.

A notice appears on your first visit. You can control or block cookies from your browser settings, or through Meta's and TikTok's ad opt-out tools.

5. Server logs and abuse prevention

Like any site, the hosting records technical data about requests (time, page requested, browser type, IP address) in its standard logs for operational and security purposes.

To prevent abuse of the contact form we apply a limit on the number of messages from the same source. To do that we do not store the IP address itself: we keep a one-way digital fingerprint derived from it, sufficient for counting and from which the address cannot be recovered. These fingerprints are deleted automatically after a day.

6. Retention

We keep contact messages for as long as they are needed to reply to you and to follow a project through if a contract arises, and thereafter for the period accounting and legal requirements demand. You may ask for deletion at any time.

7. Your rights

You have the right to ask: what data of yours we hold, to correct anything inaccurate, and to have it deleted. For details and how to make the request, see the Data Deletion page.

8. Site security

The site is served over HTTPS exclusively, with security headers including a Content Security Policy that limits scripts to our own domain and the declared measurement and advertising tools. The contact form is protected by origin checking, rate limiting, a spam honeypot, and input validation.

Even so, no transmission over the internet is absolutely secure. Do not send sensitive information through the form (financial details, identity numbers, passwords) — and we will never ask you to.

9. Children

The site is aimed at organisations and individuals seeking construction services, and we do not knowingly collect data from children under sixteen.

10. Changes

When our practices change we update this page and change the last-updated date at the top.

11. Contact

For any privacy question or a request concerning your data, reach us through the contact page.