Legal

Privacy Policy

How Temperley Design collects, uses and protects your personal information. Last updated 8 October 2026.

1. Introduction

This Privacy Policy explains how Temperley Design collects, uses and looks after personal information when you visit my website, contact me or work with me. I have tried to keep it clear and straightforward.

I handle personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where the EU General Data Protection Regulation (EU GDPR) applies, for example if you contact me from a country in the European Economic Area, I also take account of its requirements.

2. Who I am

Temperley Design is a web design, graphic design, branding and printing business based in Darlington, County Durham, United Kingdom. For the purposes of data protection law, I am the “controller” of the personal information described in this policy.

  • Business name: Temperley Design
  • Legal status: Sole trader trading as Temperley Design
  • Location: Darlington, County Durham, United Kingdom
  • Email: andrew@temperleydesign.com
  • Telephone: 07377 328304

I have not appointed a Data Protection Officer, as this is not required for a business of my size and type. Please send any privacy questions to the contact details above.

3. What personal information I collect

Information you give me

  • Enquiry form: your name, email address, phone number (optional) and the message you write.
  • Emails, phone calls and WhatsApp messages: your name, contact details and anything you choose to tell me, such as details about your business and your project.
  • If you become a customer: business or company details, billing and invoicing information, and the files, text, images and artwork you provide for your project.

Information collected automatically

  • Enquiry form technical details: when you send the form, my website records your IP address, your browser and device type (user agent), the page you sent it from and the date and time.
  • Cookie choices: when you respond to my cookie banner, I record your choice, a random consent ID, the date and time, your IP address, an approximate country and your browser type, so that I can show which choice was made.
  • Broken link monitoring: my SEO plugin (RankBridge SEO) records when someone visits a page that does not exist, including the requested address, the referring page and the browser type. It does not record IP addresses.

I do not use analytics, advertising or tracking tools on this website, and I do not knowingly collect special category data (such as health information). Please do not send me sensitive personal information through the enquiry form.

4. How I collect your information

  • When you fill in the enquiry form on my Contact page.
  • When you email me, phone me or message me on WhatsApp.
  • When you speak to me directly about a project or become a customer.
  • Automatically, through the technical features of the website described above, and through cookies (see section 8).

5. How I use your information

I use personal information to:

  • respond to your enquiries and provide quotations;
  • provide the design, website and printing services you ask for;
  • communicate with you about your project, including deliveries and invoices;
  • keep business and accounting records;
  • run, maintain and protect my website, including preventing spam and misuse;
  • record your cookie choices; and
  • meet my legal and regulatory obligations.

I do not sell your personal information, and I do not use it for automated decision-making or profiling.

6. My lawful basis for using your information

Data protection law requires me to have a lawful basis for each way I use personal information. The main ones I rely on are:

What I doLawful basis
Replying to an enquiry and preparing a quotationContract (taking steps at your request before entering into a contract) or legitimate interests (responding to business enquiries)
Providing services to customers and managing projectsContract
Keeping accounting and tax recordsLegal obligation
Recording technical details with form submissions, monitoring broken links and protecting the websiteLegitimate interests
Recording your cookie choicesLegitimate interests (keeping a record that I have respected your choice, which cookie law expects me to be able to show)
Loading Google Maps when you accept cookies or choose toConsent (you accept cookies or choose to load the map)

7. My legitimate interests

Where I rely on legitimate interests, these are:

  • responding to people who contact me about my services;
  • keeping my website working properly and fixing broken links;
  • protecting the website and my systems against spam, abuse and unauthorised access;
  • keeping sensible records of enquiries and the work I carry out; and
  • communicating with existing customers about their projects.

I only rely on legitimate interests where I believe my use of your information is reasonable and expected, and does not override your rights. You can object at any time (see section 16).

8. Cookies

Cookies are small text files that a website stores on your device. My website uses very few.

CookieTypePurposeDuration
cookieadmin_consentStrictly necessaryRemembers your choice on my cookie banner, together with a random consent ID.1 year
WordPress login cookies (wordpress_logged_in_*, wordpress_sec_*, wp-settings-*)Strictly necessaryUsed only when a website administrator logs in. Ordinary visitors do not receive them.Session, or up to 14 days if “remember me” is selected
Google Maps cookiesFunctional (third party)Only set if you accept cookies on my cookie banner or choose to load the map on my Contact page. These are set and controlled by Google.Set by Google

I do not use analytics cookies or marketing and tracking cookies.

Strictly necessary cookies do not need your consent. The Google map on my Contact page only loads if you click “Accept All” on my cookie banner or click “Load map” on the page. Until then, Google cannot set cookies or receive your information through it. You can change your cookie choice at any time using the cookie settings button on the site.

You can also delete or block cookies through your browser settings. Blocking strictly necessary cookies may mean your cookie choice is not remembered.

9. Analytics

I do not currently use Google Analytics or any other website analytics or visitor tracking service. If I introduce one in future, I will update this policy and ask for your consent before any non-essential analytics cookies are used.

10. Contact forms and enquiries

When you send an enquiry through my website:

  • What I collect: your name, email address, phone number (if you give it) and message, plus your IP address, browser type, the page you sent it from and the time.
  • Why: so that I can reply, answer your questions and, if you wish, provide a quotation. The technical details help me identify and deal with spam and misuse.
  • Who receives it: your enquiry is emailed to Temperley Design and a copy is stored in my website’s database.
  • How I use it: only to deal with your enquiry and any work that follows. I will not add you to a mailing list.
  • How long I keep it: see section 14.

11. Email and communications

Emails you send me, and enquiry form notifications, are received in my business email account. My email is hosted with my website hosting provider, Shock Hosting.

If you contact me on WhatsApp, your messages are handled by WhatsApp (part of Meta) under WhatsApp’s own privacy policy, as well as by me. If you would prefer not to use WhatsApp, please email or phone me instead.

12. Who I share your information with

I only share personal information where it is needed to run my business or where the law requires it. This may include:

  • Website hosting provider: my website, its database and my email are hosted by Shock Hosting.
  • Google: only if you accept cookies or choose to load the map on my Contact page.
  • Website software: my website runs on WordPress with a number of plugins. These run on my own hosting and, as far as I am aware, do not send your personal information to the plugin developers.
  • Delivery services: if I deliver your order, I pass your name, delivery address and, where needed, a contact phone number to the courier or delivery service handling it.
  • Professional advisers: such as an accountant, where needed.
  • Government, regulators or law enforcement: where I am legally required to share information.

I do not sell or rent your personal information to anyone.

13. International transfers

My website and email are hosted by Shock Hosting on a server located in the UK, so this information is stored in the UK.

Some optional services you choose to use may involve transfers outside the UK and EEA:

  • Google Maps: if the map loads (because you accept cookies or choose to load it), information such as your IP address is sent to Google, which may process it in the United States. Google LLC participates in the EU-US Data Privacy Framework and its UK Extension.
  • WhatsApp: if you message me on WhatsApp, your messages are processed by WhatsApp under its own terms and privacy policy.

The fonts on my website are served from my own hosting rather than from Google.

14. How long I keep your information

I keep personal information only for as long as I need it, using the following periods:

InformationHow long I keep it
Enquiries that do not lead to any work (emails and form submissions)Up to 3 months after my last contact, in case you come back to me about the same project.
Customer project records and correspondenceFor the length of the project and then for as long as needed to support any follow-up work.
Invoices and accounting recordsAt least 5 years after the 31 January Self Assessment deadline for the tax year they relate to, as HMRC requires.
Cookie consent records12 months, after which they are deleted automatically.
Broken link (404) recordsUp to 90 days.
Website backupsI back up the website monthly. Backups contain a copy of the website database, and each backup is kept for 6 months before it is deleted.

15. How I keep your information secure

I take sensible steps to protect personal information, including:

  • my website uses an encrypted (HTTPS) connection;
  • access to the website’s administration area is restricted and protected with login security that limits repeated failed login attempts;
  • access to my email and business records is restricted to me; and
  • I aim to keep the website software and plugins up to date.

No website or email system can be guaranteed to be completely secure. If a data breach occurred that put your rights at risk, I would act promptly and notify you and the Information Commissioner’s Office where the law requires.

16. Your data protection rights

You have the following rights over your personal information:

  • To be informed about how I use it, which is what this policy is for.
  • Access: to ask for a copy of the information I hold about you.
  • Rectification: to ask me to correct information that is wrong or incomplete.
  • Erasure: to ask me to delete your information.
  • Restriction: to ask me to limit how I use your information.
  • Data portability: to ask for information you gave me in a format you can reuse elsewhere.
  • Object: to object to me using your information where I rely on legitimate interests.
  • Withdraw consent: where I rely on consent, you can withdraw it at any time.
  • Automated decisions: I do not make decisions about you using automated processing or profiling.

Some of these rights only apply in certain circumstances, and some are subject to legal exemptions; for example, I may need to keep invoices for tax purposes even if you ask me to delete your information. To use any of your rights, contact me using the details in section 21. There is normally no charge, and I will respond within one month.

17. Marketing communications

I do not currently send newsletters or marketing emails, and I will not add you to a mailing list because you have contacted me. If I start sending marketing in future, I will only do so where the law allows, for example with your consent, and every message will include an easy way to unsubscribe.

18. Children

My website and services are aimed at businesses and adults. They are not directed at children, and I do not knowingly collect personal information from anyone under 18. If you believe a child has sent me their information, please contact me and I will delete it.

19. Third-party websites

My website contains links to other websites and services, such as Facebook, Instagram, WhatsApp and Google Maps. I am not responsible for how those sites handle your information, and their own privacy policies apply when you use them.

20. Changes to this policy

I may update this policy from time to time, for example if I change how my website works or start using a new service. The latest version will always be on this page.

Last updated: 8 October 2026

21. How to contact me

If you have any questions about this policy or how I use your information, or want to use any of your rights, please contact me:

22. Complaints

If you are unhappy with how I have handled your information, please contact me first and I will do my best to put things right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk, telephone 0303 123 1113.

If you live or work in the European Economic Area and the EU GDPR applies, you can also complain to the data protection supervisory authority in your country.