Home / Legal
Legal & privacy
Everything in one place: how we handle your data, what this site stores, the terms you use it under, and how accessible it is.
Last updated:
1. Privacy notice
This notice explains how TFM collects and uses personal data, and is written to the UK GDPR and the Data Protection Act 2018. For the data described here we are the data controller — we decide why and how it is used.
Who we are
- Trading name: TFM (The Flame Makers)
- Legal entity name: Tarik Jawish
- Business structure: Sole trader
- Trading address: 2 Church Court, Little Church, Rugby, Warwickshire, CV21 3DG
- Companies House number: not applicable — not a limited company
- Contact: flamemakersmedia@gmail.com · 07864 394030
We are not required to appoint a Data Protection Officer and have not done so. Privacy questions go to the address above and are answered by the founder.
When we act for a client instead. When we run a client's website, advertising or social accounts, personal data belonging to their customers is normally controlled by that client and we act as a processor under a separate written agreement. This notice covers our own site and our own enquiries.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Name, email, phone if given, business name if given, services ticked and your message — from the enquiry form | To reply to your enquiry and discuss a possible project | Consent (UK GDPR Art. 6(1)(a)), given by ticking the box. You can withdraw it at any time. |
| Correspondence you send us by email or phone | To answer you and keep a record of what was agreed | Consent, or contract (Art. 6(1)(b)) once you engage us |
| Client project records and invoices | To carry out and bill the work | Contract, and legal obligation (Art. 6(1)(c)) for accounting records |
| Standard web server logs — IP address, timestamp, page requested, browser string | To keep the site available and investigate abuse | Legitimate interests (Art. 6(1)(f)) in running a secure website |
We do not collect special category data through this website, and we ask you not to put any into the enquiry form. There is no analytics, no advertising pixel and no third-party tracking on this site. We do not profile visitors and we do not make automated decisions about you. We will not add you to a marketing list from an enquiry.
Who we share it with
We do not sell personal data. We use a small number of providers who process it on our instructions:
- Netlify, Inc. — hosts this site, keeps server logs, and receives anything you send through the contact form. Netlify is based in the United States, so an enquiry is transferred outside the UK; that transfer relies on the standard data protection clauses in Netlify's data processing agreement. Submissions are emailed to us and we clear them from the Netlify dashboard once the enquiry has been answered. If you would rather not use the form, email or ring us instead — those reach us directly.
- Google (Gmail) — holds our mailbox and therefore any correspondence with you.
- Accounting software — none in use — would hold invoices and payment records for clients.
Where personal data leaves the UK we rely on a transfer mechanism permitted by the UK GDPR — normally the UK extension to the EU–US Data Privacy Framework where the provider is certified, or the International Data Transfer Addendum to the standard contractual clauses. Ask us if you would like the detail for a particular provider.
How long we keep it
- Enquiries that do not become work: up to 12 months from our last exchange.
- Client records and correspondence: the engagement plus 6 years, matching the limitation period for contract claims.
- Invoices and accounting records: 6 years from the end of the relevant accounting period, as HMRC requires.
- Server logs: a short rolling period held by our host, typically no more than 30 days.
Security
The site is served over HTTPS. Access to enquiries and client files is limited to the founder, protected by strong unique passwords and two-factor authentication where the provider supports it. We deliberately hold as little personal data as possible. If a breach occurs that is likely to risk people's rights and freedoms we will report it to the ICO within 72 hours of becoming aware, and tell affected people directly where the risk is high.
Your rights
Under the UK GDPR you have the right to access your data, have it corrected or erased, restrict or object to how we use it, receive it in a portable form, and withdraw consent at any time. Withdrawing consent does not affect anything done before you withdrew it.
To use any of these, email flamemakersmedia@gmail.com. It is free and we will respond within one month. We may ask for enough information to be sure who you are before we act.
This site is not directed at children and we do not knowingly collect data about anyone under 18.
Complaints
Please raise anything with us first. If you are still unhappy you can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · 0303 123 1113 · ico.org.uk/make-a-complaint (opens in a new tab).
2. Cookies and storage
This website sets no cookies. Not for analytics, not for advertising, not for "performance". There is no Google Analytics, no Meta pixel, no heat-mapping and no A/B testing tool here.
It also stores nothing on your device — no local storage, no session storage. Because nothing is stored or read, the consent requirement in regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR) is not triggered, which is why you are not asked to dismiss a cookie banner to read this page.
Everything the site needs is served from our own domain. The fonts, the background video, the photographs and the smooth-scrolling script are all hosted by us, so loading a page makes no request to any other company. There are no embedded third-party players, maps or feeds.
Separately from your device, our hosting provider keeps ordinary web server logs so the site can be kept online and secure. That is covered in the privacy notice above.
If we ever add something that stores data on your device — analytics, a booking widget, a chat tool — we will update this page and ask for your consent before it loads. We will not switch it on quietly.
3. Terms of use & business details
Business details
This website is operated by TFM, a digital studio based in Rugby, Warwickshire, United Kingdom.
- Trading name: TFM (The Flame Makers)
- Legal entity name: Tarik Jawish
- Trading address: 2 Church Court, Little Church, Rugby, Warwickshire, CV21 3DG
- Companies House number: not applicable — not a limited company
- VAT number: not VAT registered
- Email: flamemakersmedia@gmail.com · Phone: 07864 394030
If the business is incorporated or VAT registered, the Companies Act 2006 and the Electronic Commerce (EC Directive) Regulations 2002 require those numbers and the registered address to be shown here.
Using this website
You may view, download and print pages for your own use in considering our services. You agree not to use the site unlawfully, attempt to gain unauthorised access to it, republish substantial parts of it commercially without permission, or scrape it in a way that places an unreasonable load on our infrastructure.
Content on this site
The content describes the services we offer. It is general information, not a quotation or an offer capable of acceptance, and nothing here creates a contract — work is agreed in a separate written scope and quote.
We publish no performance statistics, client counts or testimonials that we cannot evidence. Portfolio items that are demo builds rather than live client work are labelled as demos. If a figure ever appears on this site it will be one we can substantiate, as the Consumer Protection from Unfair Trading Regulations 2008 and the CAP Code require.
Intellectual property
The TFM name, our logo, the design of this site and its text belong to us or are used under licence. Photography and video are stock media licensed from Pexels (opens in a new tab) under the Pexels licence. Typefaces are Instrument Serif and Inter Tight, used under the SIL Open Font Licence and self-hosted. Smooth scrolling uses the Lenis library, MIT licensed.
Work we do for you. On full payment of our invoices you own the finished website, brand assets and content created specifically for you. We retain ownership of our own underlying tools and techniques, and third-party components stay under their own licences. Your project agreement takes precedence over this page.
Availability and liability
We aim to keep this site available but do not guarantee it will be uninterrupted or error-free, and may change or withdraw any part of it without notice. Availability commitments for hosting we provide to clients are set out separately in your hosting agreement.
Nothing in these terms limits our liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited. Subject to that, we are not liable for loss of profit, loss of business, business interruption or loss of anticipated savings arising from your use of this website. Liability for work we carry out is dealt with in the relevant project agreement. If you use this site as a consumer, nothing here affects your statutory rights.
Complaints and governing law
Tell us — flamemakersmedia@gmail.com. We acknowledge within 2 working days and aim to resolve within 14. These terms are governed by the law of England and Wales, whose courts have exclusive jurisdiction.
4. Cancellation, deposits and refunds
This section explains when work can be cancelled, what happens to money already paid, and what you are charged for work already done. The full terms for a specific project are in the written proposal we send you before anything starts; this page sets out the position that applies to every engagement.
Which set of rules applies to you
UK law gives extra cancellation rights to consumers — a consumer is an individual acting wholly or mainly outside their trade, business, craft or profession. If you are buying for a business, even a very small one you run yourself, you are not a consumer for this purpose and the cancellation terms in your proposal apply instead.
We do not decide this for you. If you are unsure which applies, ask us before you pay a deposit and we will set it out in writing.
If you are a consumer: your 14-day right to cancel
Because we agree work by email, phone or through this website rather than face to face, a consumer contract with us is a distance contract under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013.
You have the right to cancel within 14 days without giving any reason. The cancellation period expires 14 days from the day the contract is concluded — which for us is the day we confirm in writing that we are taking the project on.
To cancel, tell us in a clear statement — an email to flamemakersmedia@gmail.com is enough. You may use the model cancellation form at the end of this section, but you do not have to. To meet the deadline it is enough that you send your message before the 14 days have expired.
If you cancel in time and we have not started, we refund everything you have paid, including any deposit, without undue delay and no later than 14 days after we are told. We refund by the same method you paid by, and you will not be charged a fee for the refund.
If you want us to start inside the 14 days
Most people want work under way sooner than that. We are not allowed to begin during the cancellation period unless you expressly ask us to, so the proposal asks you to confirm two things in writing:
- that you expressly request we begin work during the 14-day cancellation period; and
- that you acknowledge you will lose the right to cancel once the work has been fully performed.
This is your choice and you are never required to make it. If you would rather keep the full 14 days untouched, say so and we will simply start on day 15.
What you pay if you cancel after we have started
If you asked us to start early and then cancel within the 14 days, you pay a proportionate amount for what we supplied before you told us — that is, an amount in proportion to what has been performed compared with the full coverage of the contract, calculated against the total price agreed. You do not pay for work not done, and anything you have paid above that amount is refunded to you.
Once the work has been fully performed — the site is built and delivered, the shoot has happened, the content is handed over — the right to cancel ends, provided you gave us the express request and the acknowledgement described above. That is the law working as intended: you get a genuine cooling-off period, and we are not left having completed a project that can then be cancelled in full.
Deposits
We take half the agreed price as a deposit before work starts, with the balance due on launch. The deposit is not a penalty and it is not automatically forfeited. If you cancel, it is applied against the proportionate amount owed for work actually done, and any balance comes back to you. If we cancel, you get the whole deposit back plus anything else you have paid.
Costs we have paid out to third parties
Some things are bought from someone else on your behalf and cannot be refunded to us once purchased — a domain registration, a stock image or font licence, a paid plugin, a studio or equipment hire booked for a shoot. Where we have already paid such a cost at your request, it is included in what you owe. We list any of these in the proposal before you commit, and we will not incur one without telling you first.
If we cancel, or cannot finish
If we end the engagement for any reason other than your failure to pay or to provide what the project needs, we refund everything you have paid for work not yet delivered, and you keep whatever has already been completed and paid for. We will also give you the files and hand over anything needed to let someone else pick the work up.
Your statutory rights either way
Nothing here affects the rights the Consumer Rights Act 2015 gives consumers: that a service is performed with reasonable care and skill, within a reasonable time, and for a reasonable price where none was fixed. We cannot exclude or restrict those rights and do not try to. If something we deliver is not right, tell us and we will put it right.
Model cancellation form
You only need this if you want it — any clear statement will do. Complete and return this form only if you wish to withdraw from the contract.
To TFM, Tarik Jawish, 2 Church Court, Little Church, Rugby, Warwickshire, CV21 3DG, flamemakersmedia@gmail.com:
I/We [*] hereby give notice that I/We [*] cancel my/our [*] contract of sale of the following goods [*]/for the supply of the following service [*],
Ordered on [*]/received on [*],
Name of consumer(s),
Address of consumer(s),
Signature of consumer(s) (only if this form is notified on paper),
Date
[*] Delete as appropriate.
If you are a business customer
The 14-day statutory right above does not apply. Cancellation is governed by the proposal you signed, which in summary is: tell us in writing; you pay for work completed up to that date plus any third-party costs already committed; the deposit is set against that sum and any balance is refunded. Unpaid invoices carry interest and compensation at the rates set by the Late Payment of Commercial Debts (Interest) Act 1998.
Ownership of the work
Copyright and the right to use what we make for you transfer to you when the project has been paid for in full. Until then you have a licence to review and comment on the work, but not to publish or use it. This protects both sides: you are never charged for something you have not agreed, and we are not left unpaid for something already in use.
5. Accessibility statement
We build accessible sites for clients, so we hold our own to the same standard. This statement covers theflamemakers.co.uk. It does not cover websites we build for clients, which have their own statements.
The standard
We aim to meet WCAG 2.2 level AA and believe this site currently meets it, with the caveats below. The Public Sector Bodies Accessibility Regulations 2018 do not apply to us — we are not a public sector body. The duty that does apply is the Equality Act 2010, which requires reasonable adjustments so disabled people are not put at a substantial disadvantage; we treat WCAG 2.2 AA as the practical way to meet it.
What we have done
- Keyboard. Everything interactive is reachable and operable by keyboard in a sensible order, with a visible focus ring on every control. The mobile menu traps focus while open, closes on Escape, and returns focus to the button that opened it.
- Contrast. Every text and background pairing was measured rather than eyeballed. Body and heading text reaches at least 16:1; the lowest ratio anywhere is above 5:1 against a 4.5:1 requirement. Emphasis in headings is done with italics rather than colour, so it does not depend on colour perception.
- Moving content. The hero background video has a clearly labelled pause button, meeting success criterion 2.2.2. The opening animation on the home page lasts under three seconds, stops on its own, and can be dismissed with any key or click.
- Reduced motion. If your device asks for reduced motion, the video does not play, the opening animation is skipped, the custom cursor is switched off and scroll animations are disabled — content simply appears.
- The cursor. The custom cursor appears only for mouse users on fine-pointer devices, never replaces the text caret in form fields, and shrinks rather than grows over links so it cannot obscure what you are about to click.
- Images. Every photograph has descriptive alternative text. Decorative media is hidden from assistive technology.
- Structure. Headings run in order without skipping levels, landmarks are used properly, the page language is set to en-GB, and there are no duplicate IDs or positive tabindex values.
- Forms. Every field has a real, visible, associated label. Errors are announced through a live region rather than by colour alone, and autocomplete attributes are set.
- Zoom and reflow. Text is sized in relative units and the layout reflows to a single column, staying readable at 400% zoom and at 320px wide without horizontal scrolling.
What we know is not perfect
- Smooth scrolling. We use a smooth-scroll library for mouse and trackpad. It is disabled entirely when reduced motion is requested, but if you find it disorienting and do not use that setting, tell us.
- Testing so far. We have tested with keyboard-only navigation, at 320px and 400% zoom, with reduced motion on, and with programmatic contrast and structure checks across every page. We have not yet completed a full manual pass with JAWS, NVDA and VoiceOver, or commissioned an independent audit. We will update this statement when we have.
Tell us about a problem
If any part of this site stops you doing something, we want to know — it is a defect and we will treat it like one. Email flamemakersmedia@gmail.com or ring 07864 394030. Say what you were trying to do, what got in the way and what you were using. We acknowledge within 2 working days. If you need something here in another format — large print, plain text, or read out over the phone — ask and we will sort it.
If you are unhappy with how we respond, the Equality Advisory and Support Service gives free advice on disability discrimination: equalityadvisoryservice.com (opens in a new tab).
This statement was prepared on 26 August 2026 following our own testing of the site as built. It is reviewed whenever the site changes materially, and at least once a year.





