Privacy Policy.
Who I am
This website is operated by Brandesign Ltd, a limited company registered in England & Wales, with Polly Sheldon as director. We provide creative direction, brand photography, brand identity design, website builds and personal branding services.
If you have any questions about this policy or how I handle your data, you can contact me at hello@pollysheldon.com.
What data I collect
I may collect and process the following personal data:
- Contact information — name, email address and phone number when you submit a contact form or enquiry
- Payment information — processed securely via Stripe. I do not store your card details on my servers
- Photos and images — photographs submitted as part of any brand project or studio session
- Booking information — scheduling data when you book via Calendly
- Technical data — IP address, browser type, pages visited and other analytics data collected automatically
How I use your data
I use your personal data to:
- Respond to your enquiries and provide the services you have requested
- Process payments securely through Stripe
- Deliver project work including photography, design and web builds
- Send occasional updates about my services (only where you have opted in)
- Improve my website and understand how visitors use it
Legal basis for processing
Under UK GDPR, I process your data on the following legal bases:
- Contract — processing necessary to fulfil a service you have purchased or requested
- Legitimate interest — to run and improve my business and website
- Consent — where you have explicitly opted in, such as marketing emails or non-essential cookies
Third-party services
I use the following third-party services that may process your data:
- Stripe — for secure payment processing. Stripe Privacy Policy
- Cloudflare — for website hosting, performance and basic analytics. Cloudflare Privacy Policy
- Google Analytics — for understanding website traffic and usage. Google Privacy Policy
- YouTube — for embedded video content. Videos are embedded using privacy-enhanced mode where possible
- Calendly — for scheduling calls and bookings. Calendly Privacy Policy
- Google Reviews — for displaying client testimonials
Cookies
This website uses cookies to function properly and to help me understand how visitors use the site. For full details about the cookies I use and how to manage them, please see my Cookie Policy.
How long I keep your data
- Contact form submissions — kept for as long as necessary for business purposes, typically up to 3 years after last contact
- Project files and deliverables — kept for the duration of our working relationship and a reasonable period afterwards
- Payment records — kept for 6 years as required by HMRC for tax purposes
- Analytics data — retained according to the policies of the respective analytics providers
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data I hold about you
- Rectification — ask me to correct any inaccurate or incomplete data
- Erasure — ask me to delete your personal data (the "right to be forgotten")
- Restrict processing — ask me to limit how I use your data
- Data portability — request your data in a structured, commonly used format
- Object — object to my processing of your data based on legitimate interest
- Withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, email me at hello@pollysheldon.com. I will respond within one month.
Data security
I take reasonable measures to protect your personal data from unauthorised access, alteration or loss. This includes using HTTPS encryption across my website and only working with trusted third-party providers who maintain appropriate security standards.
Complaints
If you are not happy with how I handle your data, I would appreciate the chance to address your concerns directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
Changes to this policy
I may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.