1. Introduction
Welcome to the privacy policy for sh.creative ltd. We respect your privacy and are committed to protecting your personal data. This policy informs you how we look after your personal data when you visit our website and tells you about your privacy rights and how the law protects you.
2. Important Information and Who We Are
sh.creative ltd is the controller and responsible for this website (referred to as “we”, “us” or “our” in this privacy policy).
- Contact Details: sh.creative ltd. 5 South Parade, Oxford. OX2 7JL.
- Data Protection Officer: Simon Haynes, simonh@shcreative.co.uk
3. The Data We Collect About You
We may collect, use, store and transfer different kinds of personal data about you, including:
- Identity Data: First name, last name, username or similar identifier.
- Contact Data: Email address and telephone numbers.
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website (e.g., GA4 data).
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.
4. How Your Personal Data Is Collected
- Direct interactions: You may give us your Identity and Contact Data by filling in forms (e.g., Mailchimp-integrated forms) or by corresponding with us.
- Automated technologies or interactions: As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies (including Google Analytics 4).
5. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal obligation.
- Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending direct marketing communications to you via email (Mailchimp) or using non-essential cookies (GA4). You have the right to withdraw consent at any time.
6. Disclosures of Your Personal Data
We may share your personal data with:
- Service Providers: Including WebCap Studio (IT support and site maintenance) and Mailchimp (email marketing platform).
- Analytical Providers: Google (for GA4 tracking).
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
8. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. [sh.creative to define specific retention periods].
9. Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, or erasure of your personal data.