Privacy Policy

1. Who We Are

Old Genius Creative ("we", "us", "our") is a UK-based web design service. This privacy policy explains how we collect, use, and safeguard your personal information when you use our website or services.

2. What We Collect

We collect only the information necessary to provide our services:

• Contact details: name, email address, phone number, and business name when you enquire or commission work.
• Project information: content, images, and briefs you provide for your website build.
• Usage data: anonymised analytics about how visitors use our website (see Cookies below).
• Payment information: handled securely by Stripe. We do not store full card details.

3. How We Use Your Data

We use your personal data solely to:

• Respond to enquiries and deliver the services you have requested.
• Send project updates, invoices, and service-related communications.
• Maintain and improve our website and services.
• Comply with legal obligations.

We do not sell, rent, or trade your personal information with third parties for marketing purposes.

4. Cookies and Analytics

Our website uses essential cookies to ensure proper functionality. We may also use anonymised analytics cookies to understand visitor behaviour. These do not identify you personally. You can disable non-essential cookies via your browser settings.

5. Data Sharing

We share data only with trusted service providers necessary to run our business — for example, Stripe for payment processing, our hosting provider, and email services. All providers are bound by confidentiality and data protection obligations.

6. Data Retention

We keep your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. Typically, we retain project records for six years.

7. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (the "right to be forgotten").
• Object to or restrict certain types of processing.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us via our contact page.

8. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration. All data is transmitted over encrypted connections (SSL/TLS).

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this privacy policy or how we handle your data, please get in touch via our contact page.