Privacy Policy

Who this notice is about

This notice covers the StartBright Studio website at startbright.co.uk and enquiries sent through our contact form, email, phone or WhatsApp. StartBright Studio is responsible for deciding how personal information collected for these purposes is used. For privacy questions or to exercise your rights, email info@startbright.co.uk.

This notice does not cover websites we design for clients. Each client is responsible for explaining how their own website and business use personal information.

Information you give us

Our enquiry form collects your name, email address, selected service and message so we can respond. Submissions are sent to the studio’s email inbox. We use a short-lived, hashed network identifier to limit repeated submissions; that rate-limit record expires after one hour. The form does not subscribe you to marketing.

If you email us, we receive your email address, the name you use and anything you include in the message or attachments. This may include your business details, telephone number, project plans and correspondence about a proposed service. You choose what to send. Our current contact links open your email application, phone dialler or WhatsApp; there is no online checkout or public customer account registration.

Please share only what we need to understand your enquiry. Do not send passwords, payment-card details or sensitive information about other people in an initial enquiry. If a project needs access to accounts or client data, we will agree an appropriate method and the relevant responsibilities separately.

Phone and WhatsApp enquiries

You can contact us on 07932 684213. If you call or message us, we may receive your telephone number, the name or profile details you share, and the information you choose to provide about your enquiry. We use this to respond and manage the conversation, on the same enquiry-related bases described below.

Our WhatsApp buttons are ordinary links. They do not load a WhatsApp chat widget or tracking script on this website. Selecting a link opens WhatsApp, which handles information under its own Privacy Policy. You can use phone or email instead. Please avoid sending sensitive personal information, passwords or payment-card details in a message.

Information from using the website

Delivering and protecting a website involves processing technical information such as an IP address, the page requested, browser information and the time of a request. Hosting and security services may record this information in server logs for operation, troubleshooting and security.

Our cookie settings remember your choice in your browser. If you choose “Allow analytics”, Google Analytics measures page visits, device and browser information, approximate location and interactions such as contact-link clicks and successful enquiry submissions. The Analytics script is not loaded before permission. We do not send your name, email address or enquiry message contents to Analytics, and advertising personalisation and Google signals are disabled. Choose “Necessary only” in Cookie settings to withdraw permission. Advertising pixels are not enabled. Read our Cookie Policy for the current setup.

The site’s typography uses Google Fonts. Loading those fonts sends a request to Google that includes technical information such as your IP address and browser details. Google says its Fonts API does not use cookies or use this information for advertising profiles. See Google’s Fonts privacy information for details.

Why we use information

• To answer enquiries and discuss a project. Where you ask about entering into a contract personally, this is necessary to take steps at your request before a contract. When you contact us for a business, we rely on our legitimate interest in responding to relevant business enquiries and managing those relationships.
• To deliver an agreed service. Where you are the client, the basis is performance of our contract. For a client’s staff and business contacts, our legitimate interest is communicating with the people involved in the project.
• To operate and protect the website. Our legitimate interests are maintaining a usable, secure service, investigating faults and preventing misuse.
• To understand website use. We rely on your consent for optional Google Analytics. You can withdraw this in Cookie settings without affecting your ability to use the site.
• To meet applicable legal duties. Where information is needed for legal, accounting or regulatory requirements, we rely on the relevant legal obligation.

Sending an enquiry does not subscribe you to a newsletter. The website does not currently offer a mailing-list signup. We do not use website information to make solely automated decisions with legal or similarly significant effects on you.

Who may receive information

Information is handled by the people who need it to respond to you or provide an agreed service. Depending on the task, this may include providers of hosting, email, IT support, storage and professional advice. Information may also need to be disclosed where the law requires it or to deal with a legal claim.

Some technology providers operate internationally. In particular, Google’s font-delivery service and, if you allow it, Google Analytics can involve processing outside the UK. Google handles information under its Privacy Policy. If you would like details about the providers relevant to your enquiry or the safeguards applicable to an international transfer, contact us using the address above. We do not claim that all information is stored in the UK.

How long information is kept

We keep information only for as long as it is needed for the purpose it was collected for, taking account of the following criteria:

• Enquiry correspondence: whether the enquiry remains active, a follow-up is expected, or the record is needed to resolve a question or complaint.
• Project correspondence and records: the duration of the working relationship, any agreed support period and the need to establish what was agreed or delivered.
• Records subject to a legal duty: the applicable statutory retention requirement.
• Technical logs and backups: the operational and security purpose and the relevant provider’s retention and backup cycles.

The cookie-choice record on your device expires after 180 days unless you clear it sooner or update your choice. Ask us if you need the retention details for a particular record.

Your rights

Depending on the circumstances, you may ask to access your personal information, correct inaccurate information, erase it, restrict its use or receive certain information in a portable format. You may object to processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting processing that was lawful before withdrawal.

These rights have conditions and exceptions. We may need proportionate information to verify your identity. We will respond within the applicable legal time limit and explain if an extension or exception applies. Contact info@startbright.co.uk with your request.

Questions and complaints

Please contact us if you are unhappy with how your information has been handled so we can investigate and respond. You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not lose that right by contacting us first.

Changes and other websites

We will update this notice when the website or our relevant practices change. The date at the top shows the latest revision. Other websites linked from our pages have their own privacy information and controls.