Privacy policy
This policy explains how Storelight Studio collects and uses personal information when you visit storelight.co.uk, send us an enquiry, or become a client. We keep it simple: we only collect what we need to reply to you and to build and look after your website.
Who we are
Storelight Studio is the trading name of George Calder, a sole trader based in the UK. George Calder is the controller of your personal information. You can contact us about anything in this policy at [email protected].
What we collect and why
- Enquiries through our contact form: your name, business name, email address, phone number (if given), town, the style and plan you are interested in, and your message. We use these to reply to you and prepare a quote. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
- Client details form (for clients who have signed up): your contact details, your business details (name, address, phone, opening hours, services and prices, booking and social media links, the domain you want) and the website text you send us. We use these to build, publish and maintain your website. Our lawful basis is performing our contract with you.
- Customer reviews you send us: if you ask us to show reviews from your customers on your website, you send us the reviewer's first name, surname initial, star rating and review text. You confirm that the reviews are genuine and that you are happy for them to be shown. We use them only to display on your website.
- Photos you send us: photos of your business, team and work, which we use only on your website. You confirm you own them or have permission, and that people shown are happy to appear.
- Emails and messages: if you email or message us, we keep the correspondence so we can deal with your request and keep a record of our work together.
- Billing records: if you become a client, we keep invoices and payment records because the law requires us to.
We do not sell your information, and we do not use it for anything unrelated to our services. We will only send you marketing emails if you are a client or have asked us to, and you can opt out at any time.
Who we share it with
We use a small number of trusted service providers who process information on our behalf:
- Web3Forms (operated by Web3Creative, India): receives the information you submit through our forms and emails it to us. It uses Amazon Web Services, Cloudflare and Hetzner infrastructure, and spam-protection services (CleanTalk and Akismet) which may receive your IP address and email address. Web3Forms keeps submissions for up to three years unless deleted sooner. See Web3Forms' privacy policy.
- Cloudflare: hosts this website and forwards email sent to our storelight.co.uk addresses. Cloudflare processes technical information such as IP addresses to deliver the site securely.
- Google: we receive and send email using Google's Gmail service. This website also loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
When we build your website, we also use your business details with services you ask us to set up for you, such as your domain registration and hosting.
International transfers
Some of our providers process information outside the UK, including in India and the United States. Where they do, the transfer is protected by appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK-US Data Bridge.
Cookies
This website does not use analytics, advertising or tracking cookies, so we don't show a cookie banner. Our hosting provider may use strictly necessary security measures to keep the site available. If we ever add analytics or other non-essential cookies, we will ask for your consent first.
How long we keep information
- Enquiries that don't lead to working together: up to 12 months, then deleted.
- Client information: for as long as we look after your website, then up to 12 months afterwards so we can help with any handover questions.
- Invoices and accounting records: 6 years, as required for tax purposes.
Your rights
Under UK data protection law you have the right to ask for a copy of your personal information, and to ask us to correct, delete or restrict it, to object to how we use it, or to receive it in a portable format. To make a request, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.