Privacy & Cookie Policy

Who we are

This site is run by Millside Creative LLP, a limited liability partnership registered in England and Wales (company number OC437206), of 118 Parson Cross Road, Sheffield, S6 1JW. We are the data controller for the personal information described in this policy. If you have any questions about this policy or how your information is handled, contact us at hello@millsidecreative.comor 07769 308013.

We haven't appointed a Data Protection Officer, as we're not required to, but the contact above will always reach the person responsible for handling data protection matters.

Information we collect, and why

We only collect what we need to run this site and respond to enquiries. We don't sell or rent your information to anyone.

When you use the enquiry form

When you submit the form on our Contact page, the details you provide (name, email, phone number if given, and your message) are sent to us via Web3Forms, our form processing provider, so we can respond to your enquiry. The lawful basis for this is our legitimate interest in responding to enquiries about our services, and, where the enquiry leads to a contract, taking steps at your request before entering into that contract. The form is also protected by hCaptcha, which checks you're not a bot before your message is sent; hCaptcha may process your IP address and browser data as part of that check. See Web3Forms' privacy policy and hCaptcha's privacy policy for how each of them handles data. We keep enquiry correspondence for as long as reasonably needed to handle the enquiry and any resulting work, and delete it when it's no longer needed.

When you book a call

Booking a call uses Calendly, a third-party scheduling service. When you book, Calendly collects your name, email address, timezone and anything you add in the free-text field, so the booking can be scheduled and so we know what to expect on the call. This happens on Calendly's own site, under Calendly's own privacy policy, before we receive any of your details. The lawful basis is the same as above: legitimate interest in arranging a call you've requested, and taking steps at your request before a possible contract. See Calendly's privacy policy for how it handles your data.

Hosting

This site is hosted on Cloudflare, which processes standard web request data (such as IP address) as part of delivering the site to you and protecting it from abuse. See Cloudflare's privacy policy for detail.

Cookies

This site uses a small cookie to remember your cookie preferences, and, only where you've given consent, cookies that help us understand how the site is used so we can improve it. You can review or change your preferences at any time using the button below.

Google Analytics

With your consent, we use Google Analytics to understand how visitors use this site, such as which pages are viewed and roughly how people found us. Google Analytics uses cookies to do this and collects information like your approximate location, device and browser type, and pages visited. We've enabled IP anonymisation, and Google Analytics only runs after you've accepted the "Analytics" category in the cookie banner; it's off by default and you can withdraw consent at any time using the button above, which also clears any Google Analytics cookies already set and stops further tracking. The lawful basis for this processing is your consent. See Google's privacy policy for more on how Google handles this data.

How long we keep information

We keep enquiry and correspondence data for as long as it's needed to handle your enquiry and any work that follows from it, and for up to 2 years after our last contact with you in case you get back in touch, after which it's deleted. Analytics data collected via Google Analytics is retained for 14 months, in line with our Google Analytics account settings. Client contract, invoicing and accounting records are kept for as long as UK law requires (normally at least 6 years for tax purposes).

Your rights

Under UK GDPR, you have the right to:

• be told what information we hold about you and why (access)
• have inaccurate information corrected (rectification)
• ask us to delete information we no longer have a good reason to hold (erasure)
• ask us to restrict how we use your information in certain circumstances (restriction)
• receive information you've given us in a portable format (portability)
• object to processing based on legitimate interest (objection)
• withdraw consent at any time, for anything based on consent, such as analytics cookies

To use any of these rights, contact us at the email address above and we'll respond within one month. If you're unhappy with how we've handled your information, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), though we'd appreciate the chance to sort it out directly first.