Privacy and cookies

What we collect, and what we do not

We collect what you type into our contact form, and nothing else.

This site runs no analytics, sets no advertising or tracking cookies, embeds nothing from a third party, and does not profile you. The two cookies it does set are the ones that make the contact form and the staff login work at all.

The detail below says exactly what is stored, why, for how long, and how to ask us to delete it.

What we collect

Everything below is stored only because you sent us an enquiry. There is no other collection point on this site.

What you type: Your name, your email address, your organisation if you give one, and your message. Your organisation is optional; the other three are what we need in order to reply.
What your browser sends: Your browser's user-agent string, and a one-way cryptographic hash of your IP address. We do not store your IP address itself — the hash cannot be reversed to recover it. It exists so we can rate-limit a flood of automated submissions without keeping a record of who visited.
Why we may hold it: Our legitimate interest in responding to an enquiry you chose to send us, and in keeping the form working for everyone else. You can object to this at any time by writing to us.

How long we keep it

We delete an enquiry 24 months after you send it, unless it became a live engagement — in which case it is kept for as long as that relationship lasts.

If you would like yours deleted sooner, write to sales@sunlife-capital.com and we will remove it.

One company, for one purpose. When you send an enquiry we ask Resend (resend.com) to deliver the notification email to our own inbox; your name, address and message are in that email. Resend is our processor and may not use your data for anything else.

Nothing else on this site talks to a third party. Our fonts, images and stylesheets are served from our own server, so loading a page tells nobody but us that you were here.

Cookies

Two of the cookies here are strictly necessary and are always set: without them the contact form and staff sign-in cannot work. Analytics cookies are different — we ask before using those, and if you decline, the script is never sent to your browser at all.

sl_csrf: Set when you open the contact page. It proves that the form you send came from this site and not from someone else's, which is what stops a third party submitting a form in your name. It contains a random number, expires when you close your browser, and is never read by anything but this server.
sl_session: Set only when a member of our own staff signs in to edit the site. If you are reading this as a visitor, you will never be given this cookie.

You can block or delete cookies in your browser's settings. Blocking these two will not stop you reading the site, but the contact form will refuse to send, because the check it performs depends on the first one.

Your rights

Wherever you are, you can ask us to:

Show you what we hold about you
Correct anything that is wrong
Delete it
Stop using it while a complaint is resolved
Send it to you, or to someone else, in a portable form
Stop using it altogether

Write to sales@sunlife-capital.com and we will answer within one month. You do not have to give a reason, and asking costs nothing.

If you are unhappy with how we answer, you can complain to the data protection authority where you live.

Changes to this page