Privacy Policy

Most of the information we hold is information you have chosen to send. When you complete the project enquiry form on this site, you provide your name, email address, company or brand name, telephone number, the service you are interested in, an approximate budget range and a description of the project.

During an engagement you will normally send more: brand materials, existing site content, analytics access, feedback on drafts and correspondence about scope and schedule. Some of this contains personal information about you or your colleagues, and it is handled under this policy for as long as we hold it.

• Enquiry details — name, email, company, phone, service, budget range and project description.
• Engagement correspondence — emails and written feedback exchanged while the project runs.
• Project materials — content, images, copy and access credentials you supply for the work.
• Billing details — the information needed to raise and settle an invoice.

This site is hosted on the Shopify platform. Like almost every hosted website, it records basic technical information when a page is served: the pages requested, approximate location derived from network address, referring page, browser type, device type and screen size, and the time of the request.

This information is used to keep the site working and to understand in general terms which pages are visited. It is not used to build a profile of you as an individual, and we do not attempt to identify visitors from it.

The site also stores small amounts of data in your browser in order to function. What is stored, and how to control it, is described in the section on cookies and local storage below.

We hold personal information for a limited set of reasons, and each piece of information is held for at least one of them.

• To answer an enquiry. A written brief cannot be answered without contact details and a description of the work.
• To carry out an engagement. Delivering consulting, design or development work requires ongoing correspondence and access to the materials you supply.
• To meet legal and accounting obligations. Invoices and records of what was agreed must be retained for the periods required by law.
• To keep the site secure and available. Technical logs help identify faults and abuse.

We do not use your information for advertising, we do not add enquirers to a marketing list without a clear request, and we do not sell or rent personal information to anyone.

This site uses a small number of cookies and browser storage entries. Some are strictly necessary and set by the hosting platform so that pages load correctly, security checks function and preferences persist between pages. Without these the site does not work reliably.

Where basic analytics are used, they record which pages were viewed and in what sequence. This is aggregate information about site usage, not a record of an identified individual.

You can clear or block cookies through your browser settings at any time. Blocking strictly necessary entries may cause parts of the site to behave incorrectly. This site does not use advertising or cross-site tracking cookies.

Running a website and a small practice requires third party services. Each provider only receives what it needs to perform its function, and none is permitted to use your information for its own purposes.

• Website hosting. The Shopify platform hosts this site and processes the technical information described above.
• Email. Correspondence is sent and received through a commercial email provider.
• Design and collaboration tools. Project files are produced and shared using tools including Figma and Canva.
• Accounting. Invoice records are maintained through standard accounting software.

These providers may store data on servers located outside your state or country. Where information is transferred internationally, we rely on the safeguards offered by the provider under its own data protection commitments.

Enquiries that do not become projects are kept for twelve months and then deleted. This allows us to recognise a returning enquiry and to understand which kinds of work we are asked about.

Records relating to a completed engagement, including correspondence about scope and approvals, are kept for six years from completion. This period reflects the time within which a dispute about the work could reasonably arise, and the retention obligations attaching to financial records.

Project materials you supplied are returned or deleted at your request once the engagement has closed and been paid in full, except where a copy must be retained as part of the record of what was delivered.

Depending on where you live, you may have specific statutory rights over the information we hold about you. We apply the following as a matter of practice to everyone who contacts us, regardless of location.

• Access. Ask what personal information we hold about you and receive a copy of it.
• Correction. Ask us to correct information that is inaccurate or incomplete.
• Deletion. Ask us to delete information we no longer have a reason to keep.
• Objection. Ask us to stop a particular use of your information.
• Portability. Ask for a copy of the information you gave us in a common, readable format.

Requests are answered within one business day and completed within thirty days. We may need to confirm your identity before releasing information, and we may retain material where a legal or accounting obligation requires it, in which case we say so and explain why.

This site and the services described on it are directed at businesses and are not intended for children. We do not knowingly collect personal information from anyone under sixteen.

If you believe a child has submitted information through this site, tell us and we will delete it promptly.

Access to correspondence, project files and billing records is limited to those working on the engagement. Accounts used to run the practice are protected by strong, unique credentials and multi-factor authentication where the provider supports it.

No transmission over the internet is completely secure, and we do not claim otherwise. Please do not send passwords, payment card numbers or other highly sensitive credentials by email. Where a project requires access to a system you control, use that system's own invitation and permission mechanism rather than sharing a password.

This policy is reviewed whenever our practices change and at least once a year. The date shown at the top of the page records when the current version took effect, and earlier versions are superseded in full.

Where a change materially affects how we handle information about an active client, we tell that client directly rather than relying on the published page alone.