Who we are
Sugarpixel is the web design business of Kirsten Wakefield, a sole trader based in the United Kingdom. In this policy, "Sugarpixel", "we", "us" and "our" mean Kirsten Wakefield trading as Sugarpixel.
We are the data controller for the personal data you share through this website. This means we decide how and why it is used, and we're responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or your data, please get in touch using our contact form.
What we collect and why
We only collect the information you choose to send us through the forms on this site, plus a small amount of technical information needed to keep the site secure.
Contact form
- What: your name, email address, the subject of your message and the message itself.
- Why: to read and reply to your enquiry. We also send you an automatic email confirming we've received it.
- Lawful basis: our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract with you.
Website brief (the "Send a brief" questionnaire)
- What: your name, email address and business name; your answers about your business, audience, goals, pages, existing assets, timeline and budget; any links you add; and any image you choose to upload.
- Why: to understand your project, prepare for a conversation with you and reply with next steps. We also send you an automatic confirmation email.
- Lawful basis: taking steps at your request before entering into a contract with you, and our legitimate interests in responding to project enquiries.
- Uploads: please only upload images you're happy for us to see and use for your project. Files are stored securely with the rest of your brief.
Get-ready guide
- What: your name, email address, the completed guide (PDF) you upload, any notes you add, and whether you've booked a call.
- Why: to send a copy of your guide to you and to Kirsten, and to prepare for working together.
- Lawful basis: taking steps at your request before entering into a contract with you.
Newsletter
- What: your email address and the date you signed up.
- Why: to send you a thank-you email and occasional Sugarpixel news and updates.
- Lawful basis: your consent, which you give by subscribing. You can withdraw it at any time by replying "unsubscribe" to any of our emails or by sending us a message through the contact form.
Security and technical information
- What: technical information your browser sends when you visit (such as your IP address, browser type and the pages requested), a session cookie, and the anti-spam check on some forms.
- Why: to deliver the website, keep forms working and protect the site from spam and abuse.
- Lawful basis: our legitimate interests in running a secure website.
Website analytics (only if you accept)
- What: anonymous information about how the site is used, such as the pages viewed, roughly where visitors come from, and the type of device and browser, collected by Google Analytics 4 using the
_ga and _ga_* cookies.
- Why: to understand which parts of the site are useful and improve it.
- Lawful basis: your consent, which you give by clicking "Accept analytics" in our cookie notice. Google Analytics isn't loaded unless you do. You can change your choice at any time on our cookie policy page.
We don't use advertising cookies on this website. See our cookie policy for the cookies that are set.
Who we share your data with
We never sell your data, and we don't share it for marketing. We use a small number of trusted service providers ("processors") to run this website. They only process data on our behalf:
- Siteglide (built on platformOS): hosts this website and stores your form submissions, uploaded files and newsletter sign-up. It also sends the automatic emails triggered by our forms.
- Cloudflare: delivers the website securely and quickly as part of our hosting.
- hCaptcha (Intuition Machines, Inc.): the "I am human" check on our contact and get-ready guide forms, which helps block spam. hCaptcha processes information about your device and how you interact with the check. See the hCaptcha privacy policy.
- Google Analytics (Google): if you accept analytics, Google processes information about how you use the site on our behalf to give us usage reports. See Google's privacy policy.
- Google Fonts (Google): some of the fonts on this site load from Google's servers, so your browser shares your IP address with Google when a page loads.
- jsDelivr: a public content delivery network that serves some of the code libraries this website uses. Your browser shares your IP address with it when a page loads.
If you choose to book a call, you'll be taken to Google Calendar's booking page, and Google handles that booking under its own privacy policy. Links to our Instagram and LinkedIn take you to those platforms, which have their own privacy policies.
Some of these providers may process data outside the UK. Where they do, we rely on them to protect it in line with UK data protection law.
We may also share information if the law requires us to.
How long we keep your data
- Enquiries, briefs and guides: for as long as we need them to respond to you and discuss your project. If we work together, we keep them for the length of the project and afterwards for as long as we need them for our records, accounting or legal obligations.
- Newsletter: until you unsubscribe. After that we'll remove your email address from our list.
- Security information: the session cookie expires after 14 days. If you accept analytics, the Google Analytics cookies last about 2 years unless you delete them. Information logged by our hosting and anti-spam providers is kept by them under their own retention policies.
If you'd like us to delete your information sooner, just ask (see "Your rights" below).
Keeping your data safe
This website is served over a secure (HTTPS) connection, and form submissions are stored in our password-protected website admin. Access is limited to Kirsten, and to the service providers listed above only where they need it to run the website.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you and get a copy of it.
- Have inaccurate data corrected.
- Have your data deleted in certain circumstances.
- Restrict or object to how we use your data in certain circumstances.
- Data portability: receive the data you gave us in a commonly used format, in certain circumstances.
- Withdraw your consent at any time where we rely on it (for example, the newsletter). This doesn't affect anything we did before you withdrew it.
To use any of these rights, please send us a message through our contact form. We may need to confirm your identity, and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint.
Children
This website is for businesses and adults. We don't knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.
