Cookies & Privacy Policy

This Cookies and Privacy Policy explains how [Your Company Name] ("we", "us", "our") collects, uses, stores and shares personal data when you visit or use our website hosted on Squarespace (the "Website"), and how we use cookies and similar technologies. This policy is written to comply with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  1. Controller and contact details

  • Controller: [Your Company Name]

  • Address: [Your business address]

  • Data Protection Officer / Contact for privacy matters: [Name or role]

  • Email: [contact email]

  • Telephone: [contact phone number]

  1. What personal data we collect We collect and process the following categories of personal data:

  • Identity data: name, job title.

  • Contact data: email address, telephone number, postal address.

  • Transaction data: details of products or services you purchase.

  • Technical data: IP address, browser type and version, device identifiers, operating system, referrer URL, pages visited, time and date of access, and other standard log information collected by Squarespace.

  • Usage data: how you use the Website, pages viewed, clicks, and interaction with content.

  • Communication data: correspondence between you and us (including emails, messages or phone calls).

  • Marketing and preference data: your preferences in receiving marketing communications.

We do not collect special category (sensitive) personal data unless you voluntarily submit it when contacting us, in which case we will process it only where there is a lawful basis and additional safeguards in place.

  1. How we collect personal data

  • Information you provide directly: when you complete forms (contact, enquiry, subscription, order), email us, phone us, or otherwise communicate with us.

  • Automated collection: via cookies and similar technologies when you visit the Website; Squarespace also collects technical and usage data as part of its hosting services.

  • Third parties: from payment processors, analytics providers and other service providers we use (see section 8).

  1. Legal bases for processing Under UK GDPR, we rely on the following lawful bases to process personal data:

  • Performance of a contract: to provide goods or services you have requested.

  • Legitimate interests: for our legitimate business interests, such as improving the Website, fraud prevention, and direct marketing where you have not opted out and where those interests are not overridden by your rights.

  • Consent: for sending marketing communications by email where required and for non-essential cookies (see section 6).

  • Legal obligation: to comply with legal and regulatory obligations.

  • Vital interests: where necessary to protect someone’s life (rare).

  1. Purposes of processing We process personal data for the following purposes:

  • To provide and administer the Website and our products or services.

  • To manage orders, payments, refunds and customer service.

  • To respond to enquiries and communications.

  • To send administrative information, updates and marketing (subject to consent and your opt-out rights).

  • To monitor and improve the Website and user experience.

  • To detect, prevent and investigate security incidents, fraud or other unlawful activity.

  • To comply with legal obligations.

  1. Cookies and similar technologies 6.1 What are cookies Cookies are small text files placed on your device when you visit a website. They help the Website recognise your device and remember information about your visit.

6.2 Types of cookies we use

  • Strictly necessary cookies: required for the Website to function and to provide services you request (e.g. session cookies, security).

  • Performance and analytics cookies: collect anonymous information about how visitors use the Website to help us improve it (e.g. pages visited, error reports).

  • Functionality cookies: allow the Website to remember choices you make and provide enhanced features.

  • Targeting or advertising cookies: used to deliver relevant advertising and to measure campaign effectiveness. Squarespace may integrate third-party services that set these cookies.

6.3 Cookies used on our Website The specific cookies used may change over time. Examples of cookies that may be present when using Squarespace-hosted sites:

  • Squarespace session and secure session cookies (strictly necessary for login and forms).

  • Squarespace analytics cookies (performance).

  • Third-party cookies from embedded content or services (e.g. social media plugins, payment processors, analytics tools).

6.4 Managing cookies You can manage or delete cookies through your browser settings. You may also be able to refuse non-essential cookies via cookie consent tools presented on the Website. Disabling certain cookies may affect the functionality and performance of the Website.

  1. Third-party services and processors We use third-party service providers to perform functions on our behalf, including:

  • Squarespace: website hosting, platform services and built-in analytics.

  • Payment processors: providers such as Stripe