Privacy policy

This policy explains what personal data Shiny Studios collects, why we collect it, and what you can ask us to do with it. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.

Who we are

Shiny Studios is a web design and development studio based in Wirral, United Kingdom. For the purposes of data protection law we are the data controller for the information described here. You can reach us at hello@shinystudios.co.uk.

What we collect

We collect only what we need, and only in two situations.

When you contact us

If you complete our enquiry form or email us, we receive your name, email address and anything else you choose to tell us, such as your company name, an indication of budget, and a description of your project.

When you browse the site

Our host records standard server logs, including IP address, browser type and the pages requested. These are generated automatically by the infrastructure serving the site and are used for security and diagnosing faults.

We also use Vercel Speed Insights to measure page loading times. It records performance data with the page visited, device type, browser and country, without cookies or anything that identifies you.

Why we use it, and our lawful basis

• To reply to your enquiry. Lawful basis: legitimate interests, responding to someone who has deliberately contacted us about our services.
• To deliver work you have engaged us for. Lawful basis: performance of a contract.
• To keep the site secure and working. Lawful basis: legitimate interests in operating a functioning, secure website.
• To meet accounting and tax obligations. Lawful basis: legal obligation.

We do not sell your data, we do not share it for advertising, and we will not add you to a marketing list because you made an enquiry.

How long we keep it

• Enquiries that do not become projects: up to 12 months, then deleted.
• Client records: for the duration of our engagement and then six years, to satisfy HMRC record-keeping requirements.
• Server logs: retained by our hosting provider on a short rolling window.

Who we share it with

We use a small number of processors to run the business. Each is bound by contract to protect your data and to use it only on our instructions:

• Our hosting provider, which serves this website and generates the server logs described above.
• Our email delivery provider, which transmits enquiry form submissions to our inbox.
• Our email and accounting providers, for ordinary business correspondence and record-keeping.

Where a provider processes data outside the UK, that transfer is covered by the UK International Data Transfer Addendum or an equivalent safeguard.

Cookies and analytics

This site sets no advertising or tracking cookies, and does not profile you across other websites. The only measurement we run is cookie-free page speed monitoring. See our cookie policy for the detail.

Your rights

Under UK data protection law you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• ask us to delete your data, where we have no overriding reason to keep it;
• object to, or ask us to restrict, our processing;
• ask us to transfer your data to another provider;
• withdraw consent at any time, where we relied on consent.

To exercise any of these, email hello@shinystudios.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Material changes affecting existing clients will be communicated directly.