Effective Date: 29 June 2026
Elmbrick Creative ("we", "our", or "us") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit www.elmbrickcreative.com, contact us, or use our services.
Elmbrick Creative is the data controller for the purposes of UK data protection law.
Contact
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us:
Elmbrick Creative
Email: hello@elmbrickcreative.com
Scope
This Privacy Policy applies to:
- Our website
- Enquiries submitted through our contact forms
- Discovery call bookings
- Client communications
- Our marketing and creative services
It should be read alongside our Cookie Policy and Terms & Conditions where applicable.
UK GDPR Compliance
Elmbrick Creative complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK privacy legislation.
We have not appointed a Data Protection Officer because we are not legally required to do so under Article 37 of the UK GDPR.
Information We Collect
Information you provide
Depending on how you interact with us, we may collect:
- Name
- Email address
- Telephone number
- Business name
- Website address
- Social media profiles
- Project details
- Messages submitted through our contact forms
- Information provided during discovery calls or consultations
You choose whether to provide this information.
Information collected automatically
When you visit our website we may automatically collect information such as:
- IP address
- Browser type
- Device information
- Operating system
- Pages visited
- Time spent on pages
- Referral source
- Click behaviour
- General website usage statistics
This information helps us improve our website and understand how visitors use it.
How We Use Your Information
We use your personal information to:
- Respond to enquiries
- Arrange discovery calls
- Prepare quotations and proposals
- Deliver agreed services
- Communicate throughout projects
- Improve our website and user experience
- Monitor website performance and security
- Prevent fraudulent or malicious activity
- Meet our legal and contractual obligations
We will only use your information for the purposes for which it was collected.
Legal Basis for Processing
Under UK GDPR we rely on one or more of the following lawful bases:
Consent
Where you have given clear permission for us to process your information.
For example:
- Contact form submissions
- Marketing communications (where applicable)
You may withdraw your consent at any time.
Legitimate Interests
We process certain information where it is necessary for our legitimate business interests, including:
- Responding to enquiries
- Managing client relationships
- Improving our website
- Maintaining security
- Preventing misuse
- Measuring website performance
We always balance our legitimate interests against your rights and freedoms.
Contract
Where processing is necessary to:
- Take steps before entering into a contract
- Deliver agreed services
- Manage existing client relationships
Without certain information we may be unable to provide our services.
Legal Obligation
In limited situations we may process information to comply with legal or regulatory obligations.
Website Analytics
We use analytics tools to help us understand how visitors use our website.
These tools may collect information including:
- Pages viewed
- Device type
- Browser type
- Approximate location
- Time spent on pages
- Referral sources
- User interactions
Analytics data is used in aggregate and is not intended to personally identify individual visitors.
Discovery Call Bookings
When you book a discovery call we collect the information necessary to arrange and manage your appointment.
This may include:
- Name
- Email address
- Preferred booking time
- Any additional information you choose to provide
Third-Party Service Providers
We use carefully selected third-party providers to help operate our business.
These may include:
- Cloudflare (website hosting, security and content delivery)
- Sanity (content management system)
- Formspree (contact form processing)
- Calendly (appointment scheduling)
- Google Analytics (website analytics)
- Cookiebot (cookie consent management)
- MailerLite (email marketing, where applicable)
These providers only process information necessary to provide their services.
Sharing Your Information
We do not sell your personal information.
We may share information:
- With trusted service providers
- Where required by law
- To establish or defend legal claims
- During a business sale or restructuring where legally permitted
International Transfers
Some of our service providers may process information outside the United Kingdom.
Where this occurs we ensure appropriate safeguards are in place, including approved contractual safeguards where required.
Data Retention
We only retain personal information for as long as necessary.
Typical retention periods include:
- Enquiries: up to 24 months
- Client project information: for the duration of the relationship and any applicable legal obligations
- Financial records: in accordance with UK legal requirements
- Analytics data: according to configured retention settings
Information is securely deleted when no longer required.
Security
We take appropriate technical and organisational measures to protect personal information.
These include:
- Secure website hosting
- Encrypted connections (HTTPS)
- Access controls
- Secure third-party providers
- Regular software updates
- Principle of least privilege for access to information
While we take reasonable precautions, no internet transmission can be guaranteed to be completely secure.
Your Rights
Under UK GDPR you have the right to:
- Be informed
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent where processing relies on consent
To exercise any of these rights please contact us using the details above.
Children's Privacy
Our services are not intended for children under the age of 16.
We do not knowingly collect personal information from children.
If we become aware that such information has been collected, we will delete it as soon as reasonably possible.
Portfolio and Marketing
With your permission, we may showcase completed work, testimonials or project outcomes on our website or marketing materials.
Where appropriate, information may be anonymised.
External Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external websites.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, technology or our services.
The latest version will always be published on this page.
Complaints
If you have concerns about how we handle your personal information, please contact us first so we can investigate.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
https://ico.org.uk
Contact
If you have any questions regarding this Privacy Policy or your personal information, please contact:
Elmbrick Creative
Email: hello@elmbrickcreative.com