Privacy Policy

How we use your information and why we are allowed to

UK data protection law requires us to have a lawful basis for each use of personal data. Ours are:

We never sell your personal data and we do not use it for automated decision-making or profiling.

Cookies and similar technologies

When you first visit, a banner lets you choose which cookies to allow. Your choice is saved in your browser so we do not ask again, and you can change it at any time using the cookie link in the site footer.

• Necessary: used to remember your cookie preferences and keep the site working. These cannot be turned off.
• Analytics: Google Analytics cookies (for example _ga) that help us understand which pages are popular and how visitors move through the site. Loaded only if you accept them.
• Marketing and embedded media: some pages embed video from Vimeo or YouTube. When you play a video those services may set their own cookies under their own privacy policies.

Who we share your information with

We share personal data only with the service providers that help us run the site and our business, and only as far as they need it to do so:

• Vercel hosts the site and processes technical logs.
• Convex stores the site's content, contact-form submissions, newsletter sign-ups and first-party analytics.
• Resend delivers email notifications when a form is submitted.
• Google provides Google Analytics, if you accept analytics cookies.
• Vimeo and YouTube serve embedded video.

We may also share information with our professional advisers, or with authorities where the law requires it. We may disclose or transfer data if our business is sold or reorganised, in which case the new owner will be bound by this policy.

International transfers

Some of the providers above process data in the United States. Where personal data leaves the UK we rely on safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement, so that your data receives a level of protection equivalent to the UK.

How long we keep your information

• Contact-form enquiries and correspondence: up to 2 years after our last contact, or longer if the enquiry leads to a project, in which case we keep project records for 6 years after the project ends.
• Newsletter subscriptions: until you unsubscribe, after which your address is removed from the mailing list.
• Analytics data: first-party page views are kept in aggregate form; Google Analytics data is retained for 14 months.
• Hosting logs: a matter of days.

How we protect your information

The site is served only over HTTPS. Access to submissions and subscriber lists is limited to authorised staff with individual accounts, and our providers hold recognised security certifications. No transmission over the internet is completely secure, so please do not send us highly sensitive information through the contact form.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Erase your data in certain circumstances;
• Restrict or object to how we use your data;
• Port data you gave us to another provider in a machine-readable format;
• Withdraw consent at any time where consent is the basis for processing.

To exercise any of these rights, email us at the address below. We will respond within one month and will not charge a fee unless a request is clearly unfounded or excessive. We may ask you to confirm your identity first.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

Children

The site is intended for professional audiences and is not directed at children under 16. We do not knowingly collect personal data from children.

Links to other websites

The site links to partner and client websites and to social-media platforms. We are not responsible for their content or their privacy practices, so please read their policies before sharing information with them.