This policy explains how Cherwell Digital Studio Ltd (“Cherwell”, “we”, “us”) handles personal data when you use this website, contact us, or work with us. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Cherwell Digital Studio Ltdis a company registered in England and Wales (company number00000000). You can contact us about privacy at hello@cherwell.studio.
What we collect
Information you give us
- Contact details you provide through our contact form or by email: name, email address, company and the content of your message. Contact-form names and email addresses are saved as contacts by our email provider, Resend, so the enquiry and our email activity stay connected. This does not subscribe you to marketing.
- Information you share with us during a project, including access to systems, content and business data required to deliver the work.
Information collected automatically
- Technical data such as IP address and browser type, held briefly in server logs for security. Page visits are counted in aggregate with Plausible Analytics, which uses no cookies and stores no personal data. See our cookie policy.
How we use it
- To respond to enquiries and provide quotes.
- To deliver services under a contract with you or your organisation.
- To run, secure and improve this website.
- To send occasional updates about our work, only where you have opted in. You can unsubscribe at any time.
- To meet legal and accounting obligations.
Lawful basis
We rely on contract where we are delivering services to you; legitimate interests for responding to enquiries, keeping the site secure and running our business; consent for marketing emails; and legal obligation for records we must keep by law.
Who we share it with
We do not sell personal data. We share it only with suppliers who help us run the business, under contracts that require them to protect it. These currently include our hosting provider, email provider, analytics provider (Plausible, EU-hosted), accounting software and, where a project requires it, AI model providers operating under zero-data-retention terms. Some suppliers process data outside the UK; where they do, we rely on the UK International Data Transfer Agreement or an adequacy decision.
How long we keep it
- Enquiries we do not take further: 12 months.
- Client records: for the length of the engagement and 6 years afterwards, to meet accounting and legal requirements.
- Server logs: 30 days.
Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to our processing of your personal data, and to data portability. Where processing is based on consent you may withdraw it at any time. To exercise any of these rights, email hello@cherwell.studio. We will respond within one month.
Contact and complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
We may update this policy from time to time. The date at the top shows when it was last changed.