Who is responsible
LIGHT-SPEED+ is published by No Fear Tech Ltd, company number 16758357, 6 Mallard Way, Dereham, Norfolk NR19 1FJ, United Kingdom. We are the controller for the information described here. Contact hello@light-speedplus.com about privacy, support or your information.
Development updates
If you request email updates, we store your email address, subscription state, the consent wording and its version, and request and confirmation times. We use this information to send the LIGHT-SPEED+ updates you requested, record your choice and honour unsubscribes. Our basis for development emails is your consent. Confirmation is required before an address becomes eligible for a campaign.
You can withdraw consent using the unsubscribe link in an update or by contacting us. Declining analytics does not prevent subscribing. We do not sell the subscriber list or use it to advertise other products. Repeated requests do not silently reactivate an unsubscribed or suppressed address.
Optional analytics
Google Analytics 4 loads only after you accept optional analytics. With your consent, it measures page visits and interest in development updates using analytics cookies and device, browser and approximate location information processed by Google. A click expressing signup interest is different from a confirmed subscription.
Our authored events contain approved public page paths and a categorical button placement. They exclude email addresses, subscriber identifiers, confirmation tokens, URL queries and fragments. We do not load the tag on private admin, confirmation or unsubscribe pages. Google signals and advertising personalisation are disabled. Email open and click tracking are not enabled in Resend.
Google Analytics currently retains event-level data for two months and user-level data for 14 months, with the user period reset by new activity. These settings do not determine how long aggregated standard reports are available. Your analytics choice and the site's analytics cookies last for up to 180 days. Use Analytics preferences at the bottom of a public page to change your choice. Withdrawal disables future analytics and clears accessible analytics cookies on this site; it cannot undo measurements already processed by Google.
Security, administration and contact
Requests necessarily pass through our hosting service. Our application uses temporary keyed request limits to deter abuse and counts aggregate public page requests, including repeat visits and bots. Those counts are not unique visitors. We keep security audit records without logging email addresses or confirmation tokens in routine application logs.
Private administration uses essential signed session cookies, registered passkeys and authenticator user verification. Sessions expire after 30 minutes of inactivity or eight hours. These controls do not require analytics consent. Contact messages are used to respond and operate the service; necessary security and preference records support our legitimate interests in protecting it and respecting your choices.
Service providers and overseas processing
The website and database use our Netcup hosting. Resend delivers subscription and development emails, using the Ireland sending region. Purelymail handles contact mail. Google provides optional analytics. These providers receive the information needed for those functions and may use their own subprocessors.
Resend and Google may process information outside the United Kingdom. Their processing terms describe the applicable contractual transfer safeguards, including standard contractual clauses and UK provisions where applicable. See Resend's data processing terms, Google's processing terms and Google's privacy information. Contact us for information about the arrangements used for this service.
How long we keep information
Unconfirmed requests expire from our database after 30 days. Active confirmed addresses remain while you subscribe. We remove the stored email address 30 days after unsubscribe or suppression, retaining a minimal keyed preference record while this list operates so that retries do not reactivate it.
Unsent mail is cancelled after 30 days and old stored message payloads are erased. Delivery records are kept for 90 days, unmatched webhook records for up to 120 days, security audit history for 180 days and aggregate page counts for 400 days. Expired temporary sessions, challenges, previews and request-limit records are cleared separately. Encrypted database backups are retained for seven days, so deleted information may remain in a protected backup until it expires. A recovery must reapply current suppression and retention rules before sending resumes.
Your rights and concerns
You can ask us about access, correction, erasure, restriction, objection or portability where the relevant right applies, and withdraw email or analytics consent. Email hello@light-speedplus.com; we may need proportionate information to verify a request. You can also raise a concern with the Information Commissioner's Office. Withdrawing consent does not affect processing that took place before withdrawal.
