Privacy policy

Lavender Web Studio respects your privacy. This notice explains what personal data we collect, how we use it, and your rights. It applies to this website and to direct communications with us.

• Who we are
• Data we collect
• Why we use your data
• Analytics
• Sharing your data
• How long we keep it
• Security
• International transfers
• Your rights
• How to contact us
• Complaints

Who we are

Data controller: Lavender Web Studio. You can contact us at [email protected] or 07857 654 842. Based in Northumberland, United Kingdom.

Data we collect

• Contact details - when you email, message us or send the enquiry form we receive your name, email address, phone number, and any information you choose to include.
• Enquiry form: the name, email, business name, website and message you type, sent only when you press Send.
• Basic technical data - web server logs may capture IP address and user agent for security and troubleshooting.

Why we use your data

We use your data to reply to enquiries, provide quotes, deliver our services, and maintain site security. Legal bases under UK GDPR:

• Contract - to provide a quote or deliver services you requested.
• Legitimate interests - running a secure website and improving our services in a proportionate way.
• Legal obligation - keeping invoices and records required by law.

Analytics

We use Plausible Analytics to understand general website usage. Plausible is privacy friendly and does not use cookies for tracking or collect personal data for advertising. It measures page views and similar metrics in an aggregated, non-identifying way.

Sharing your data

We do not sell your data. We share it only with the service providers that run this website, each acting on our instructions under its own data processing terms:

• Cloudflare: hosts the website and runs the enquiry form. Its Turnstile service checks that form submissions come from a person rather than a bot, using technical signals from your browser; it does not read what you type into the form.
• Resend: delivers the enquiry form to our inbox as an email.
• Plausible Analytics: counts page visits, as described above.

Our own email provider holds the enquiries we receive and our replies to them.

How long we keep it

We keep enquiry emails for up to 24 months unless you ask us to delete them sooner, and business records for as long as required by law.

Security

We use appropriate technical and organisational measures to protect data. No method of transmission is perfectly secure, but we work to prevent unauthorised access and misuse.

International transfers

If we use providers outside the UK or EEA, we rely on lawful safeguards such as adequacy decisions or standard contractual clauses.

Your rights

You have rights to access, correct, delete, restrict, or object to the use of your personal data, and to data portability where applicable. You can also withdraw consent where processing relies on consent.

How to contact us

For privacy requests or questions, email [email protected].

Complaints

You can complain to the UK Information Commissioner’s Office if you are unhappy with how we handle your data. See ico.org.uk.

This page is provided for transparency. It is general information, not legal advice.