Privacy policy

A plain-English working draft describing how we handle personal data today. It should be reviewed as the business grows or its tools change. If you have a question this page doesn't answer, please just ask.

1. Who we are

Leeward Studios (“Leeward”, “we”, “us”) is a UK-based web design studio and the controller of the personal data described here. For anything about your data, contact fcc25@ic.ac.uk.

2. What we collect

We only collect what you choose to give us:

• When you book an intro call through our scheduling tool: your name, email address, the time you choose and anything you write in the booking notes.
• When you email us: your email address and the contents of your message.

We do not run accounts, and we do not buy or sell personal data. Our host keeps standard server logs (including IP addresses) for security and to keep the site running.

3. Why we use it, and our lawful basis

We use your details to reply to you, arrange and hold the call, and prepare a proposal — steps taken at your request to enter into or perform a contract. We keep basic records of enquiries as part of our legitimate interest in running and improving the studio. We only send marketing if you have asked us to, and you can opt out at any time.

4. Who processes it for us

We share data only with the service providers that make the site and our work possible:

• Cal.com — scheduling and calendar bookings.
• Netlify — website hosting and server logs.
• Our email provider — receiving and replying to your messages.

Each acts under its own privacy terms. Some may process data outside the UK; where they do, they are expected to provide appropriate safeguards for international transfers.

5. Cookies and analytics

This site sets no advertising or tracking cookies and runs no third-party analytics. If we add privacy-respecting analytics in future, we will update this page and add a cookie notice where required. Embedded tools such as the booking calendar may set cookies necessary for them to function when you interact with them.

6. How long we keep it

We keep enquiry and project correspondence for as long as needed to answer you and, where we work together, to meet our legal and accounting obligations — typically up to six years for financial records — after which it is deleted.

7. Your rights

Under UK data protection law you have the right to access, correct, delete or restrict the personal data we hold about you, to object to certain processing, and to data portability. To exercise any of these, email fcc25@ic.ac.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.