Privacy Policy

Last updated: 19 April 2025

1. Who we are Creative White Rabbit ("we", "our", "us") is a design studio run by Emily Critchley. Registered address: 41 Upper Court, Westfield, Radstock, England, BA3 3BY Contact: This email address is being protected from spambots. You need JavaScript enabled to view it. +000 000 0000

2. What data we collect Situation Data collected Purpose Legal basis (UK GDPR) Browse the website IP address, device type, browser, pages visited Site security & statistics Legitimate interest (Art 6 (1)(f)) Newsletter sign‑up Email address, first name Send updates & offers Consent (Art 6 (1)(a)) Contact form / project enquiry Name, email, message content Respond to your query Legitimate interest Purchases in the shop / logo creator Name, email, postal address, payment ID Process orders, deliver files, bookkeeping Contract fulfilment (Art 6 (1)(b)) Cookies See § 6 below Settings memory, analytics Consent / Legitimate interest We do not request or store special‑category data (race, health, etc.).

3. How we use your data Provide and maintain the website; Answer questions and send quotes; Email newsletters (only if you opt‑in); Process shop payments and deliver digital goods; Analyse site traffic to improve content.

4. Sharing your data We share information only with services that help us run the business: Service Purpose Safeguards Google Analytics 4 Site statistics Data stored in the EU/US; IP anonymised Mailchimp Email marketing EU Standard Contractual Clauses Stripe / PayPal Payment processing PCI‑DSS compliant Cloudflare Content delivery & security UK Addendum to SCCs We will never sell your data.

5. Data retention Data Retention period Enquiry emails 12 months after last reply Newsletter list Until you unsubscribe or address bounces Order records (legal) 6 years (HMRC requirement) Analytics data 26 months, then deleted

6. Cookies Our site uses cookies grouped as follows: Strictly necessary – keep the site running (e.g., joomla_session). Always active. Preferences – remember settings like language (optional). Analytical – help us understand traffic via Google Analytics (optional). Marketing – enable remarketing ads (optional). On your first visit we ask for consent; you can change settings anytime via the Cookie settings link in the footer.

7. Your rights Under UK GDPR you may: Access a copy of your data; Correct inaccurate data; Erase data (“right to be forgotten”); Restrict or object to processing; Port your data to another provider; Withdraw consent at any time (for newsletters/cookies); Lodge a complaint with the ICO (www.ico.org.uk). To exercise any right, email [email address removed].

8. Security All traffic is encrypted (HTTPS). We use firewalls, strong passwords and two‑factor authentication for admin accounts. Access to personal data is limited to the owner and the trusted processors listed above.

9. International transfers When we transfer data outside the UK/EU (e.g., to Mailchimp or Cloudflare), we rely on Standard Contractual Clauses and the supplementary measures recommended by the ICO.

10. Changes to this policy We may update this notice to reflect legal or operational changes. The “Last updated” date will change accordingly. Significant changes will be announced via email or site banner.

Questions? Email: This email address is being protected from spambots. You need JavaScript enabled to view it. or write to the postal address above.