Privacy
Privacy policy
What we collect about you, why, and what you can ask us to do with it. The short version: very little, and we never sell it.
Who we are
Ginger Afro is a small web design and branding studio in the UK. We decide how the personal information described here is used, which makes us its "controller" under UK data protection law. You can reach us about anything on this page at [email protected].
What we collect
When you visit this website
If you accept analytics cookies, Google Analytics and Microsoft Clarity record how you use the site: the pages you visit, roughly where you are, your device and browser, and where you click and scroll. If you don't accept, Clarity doesn't load and no analytics cookies are set. Our cookie policy lists every cookie and lets you change your choice.
Like any website, our web host keeps short-lived server logs (such as IP addresses and the pages requested) to keep the site running and secure.
When you email us
We keep your name, email address and whatever you tell us, so we can reply and, if you like, work together.
When you become a client
We keep your contact details, what we've agreed, invoices and payments, and the content you send us for your website. If we look after your website's analytics, we can see its reports, but not who your individual visitors are.
When you use our shop
Our shop links to Amazon. We don't collect anything when you click through. Amazon tells us about qualifying purchases in total, never who bought them.
Why we use it, and our legal basis
- Replying to you and doing work for you: to take steps you've asked for and to carry out our contract with you.
- Keeping records of payments: because the law requires it.
- Analytics on this website: your consent, which you can withdraw at any time.
- Keeping the site secure and running: our legitimate interest in a working website.
We don't send marketing emails, and we never sell or rent your information.
Who we share it with
Only the services we need to run the studio, each of which handles it under its own data protection terms:
- Google (Analytics and Tag Manager), only with your consent
- Microsoft (Clarity), only with your consent
- Our web host and our email provider
- Our accountant and HMRC, for client invoices and payments
Some of these may process information outside the UK. Where they do, they use safeguards UK law recognises, such as the UK's approved contract clauses.
How long we keep it
- Emails from people who don't become clients: up to two years after we last heard from you.
- Client records: for as long as we work together, then as long as tax law requires, usually six years.
- Analytics: Google and Microsoft delete it automatically at the end of each tool's retention period.
Your rights
You can ask us for a copy of the information we hold about you, and ask us to correct it, delete it, restrict how we use it, pass it to you in a portable form or stop using it. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office (opens in a new tab).
Your clients' visitors
When we build and look after a website for you, you decide what it collects from your own visitors, and we handle that information on your behalf. If your site uses analytics or a contact form, it will need its own privacy policy. We can help you write it.
Changes
If we change this policy, we'll update it here and change the date at the top.