Privacy policy
Last updated:
1. Who we are
This policy explains how Shock Creative (“we”, “us”) collects and uses personal information when you visit this website, send us an enquiry or work with us. Shock Creative is a web design, development and SEO studio based in Leeds, West Yorkshire, and we are the data controller for that information.
You can contact us about anything in this policy by emailing info@shock-creative.co.uk or calling 07772 427316.
2. What we collect
Enquiry details: when you use our contact form, the details you enter: your name and email address and, if you choose to give them, your phone number, website, the services you’re interested in, your budget range and your message.
Emails and calls: anything you send us by email or tell us on the phone, and our replies.
Client records: if we work together, the contact, project and billing details we need to deliver the work and invoice you.
Server logs: like most websites, our servers automatically record basic technical information about each request, such as your IP address, browser type, the page requested and the time, to keep the site secure and working.
Analytics: we use Cloudflare Web Analytics to count visits. It is cookieless and only gives us aggregate figures, such as page views, referring websites and visitors’ country and device type. It does not identify you or track you across other websites. If you accept analytics cookies, we also use Google Analytics, which uses cookies and a random online identifier to record how you use the site, such as the pages you visit, how you found us, your device, browser and approximate location. See our cookie policy for more.
3. How we use it
We only use personal information where the law allows us to. We use it:
To reply to your enquiry and, if you ask us to, prepare a proposal or quote. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
To deliver the work, manage the project and invoice you. Lawful basis: performing our contract with you.
To keep accounting and tax records. Lawful basis: complying with our legal obligations.
To keep the website secure, block spam and abuse, and understand how the site is used overall. Lawful basis: our legitimate interest in running a safe, working website.
To see in more detail how people use the site through Google Analytics, only if you accept analytics cookies. Lawful basis: your consent, which you can withdraw at any time with the Cookie settings button at the bottom of every page.
We don’t sell your information, we don’t use it for automated decision-making, and we won’t add you to a marketing list without your permission.
4. Who we share it with
We only share personal information with service providers who process it on our behalf, under contract, and only as far as they need to:
DigitalOcean and Amazon Web Services (AWS): host the website and its servers, which we manage through Laravel Forge.
Amazon Simple Email Service (Amazon SES): delivers the emails our website sends, such as contact form notifications.
Cloudflare: provides our cookieless website analytics.
Google: provides Google Analytics, which we only use if you accept analytics cookies.
Some of these providers may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Addendum. We may also share information with professional advisers, such as our accountant, or where the law requires us to.
5. How long we keep it
Enquiries: up to 12 months from our last contact, unless we go on to work together.
Client records: for as long as we need them to deliver our contract with you, and afterwards for as long as we need to meet our legal and accounting obligations (typically 6 years).
Server logs: for a short period for security purposes, after which they are deleted.
Analytics: Cloudflare’s figures are aggregate only and don’t contain personal information. If you accept analytics cookies, Google Analytics keeps the data linked to its cookies for up to 14 months, then deletes it automatically.
6. Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:
access the personal information we hold about you;
have inaccurate information corrected (rectification);
have your information deleted (erasure);
ask us to limit how we use your information (restriction);
object to us using your information, including where we rely on legitimate interests;
receive your information in a portable format, or have it sent to another organisation (portability).
To use any of these rights, email info@shock-creative.co.uk. We’ll reply within one month, and there’s normally no charge.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or by calling 0303 123 1113.
7. Contact us
Email info@shock-creative.co.uk or call 07772 427316 with any privacy questions. We may update this policy from time to time; the date at the top of the page shows when it last changed.