Who we are
https://madebykpdesign.com.
Comments
Privacy Policy
Last updated: 29 July 2026
1. About this privacy policy
KP Design Studio respects your privacy and is committed to protecting your personal information.
This privacy policy explains how we collect, use, store and protect your personal information when you:
- Visit madebykpdesign.com
- Contact us by email
- Submit an enquiry through our contact form
- Request a quotation
- Become a client of KP Design Studio
For the purposes of UK data-protection law, the data controller is:
KP Design Studio
Operated by: [YOUR FULL LEGAL NAME]
Address: [YOUR BUSINESS POSTAL ADDRESS]
Email: hello@madebykpdesign.com
2. Information we collect
Depending on how you interact with us, we may collect the following information.
Contact and identity information
This may include:
- Your name
- Email address
- Business or organisation name
- Other contact details you choose to provide
Enquiry and project information
When you submit an enquiry, we may collect:
- The type of design support you require
- Details about your project
- Your preferred timescale
- Your estimated budget
- Information about your business, audience or marketing objectives
- Any documents, images or other materials you provide
Please avoid sending sensitive personal information through the contact form unless it is genuinely necessary.
Client and transaction information
If you become a client, we may also collect:
- Billing information
- Quotations, contracts and invoices
- Payment records
- Project correspondence
- Designs, content and files supplied for the project
We do not normally collect or store complete payment-card details.
Technical and security information
When you use the website, certain technical information may be processed automatically, including:
- IP address
- Browser and device information
- Date and time of access
- Security and firewall logs
- Information used to identify spam, bots or malicious activity
This information may be processed through our hosting, website-security and spam-prevention services.
3. How we collect your information
We collect information:
- Directly from you when you contact us or submit a form
- During discussions about a potential project
- While providing design services
- Automatically through website-security and technical systems
- From third parties where you have authorised them to provide information to us
4. How and why we use your information
We use your information only where we have a lawful reason to do so.
Responding to enquiries
We use your information to:
- Respond to your message
- Understand your requirements
- Discuss potential work
- Prepare a quotation or proposal
Our lawful basis is taking steps at your request before entering into a contract. We may also rely on our legitimate interest in responding to genuine business enquiries.
Providing design services
If you become a client, we use your information to:
- Manage the project
- Communicate with you
- Create and deliver the agreed work
- Manage revisions and approvals
- Issue invoices and maintain project records
Our lawful basis is the performance of our contract with you.
Business and financial administration
We may process information to:
- Maintain accounting and tax records
- Manage payments and unpaid invoices
- Deal with complaints or disputes
- Establish, exercise or defend legal claims
Our lawful basis may be compliance with a legal obligation or our legitimate business interests.
Website security and spam prevention
We process limited technical information to:
- Protect the website from hacking and malicious activity
- Prevent spam and automated form submissions
- Investigate security incidents
- Maintain the availability and integrity of the website
Our lawful basis is our legitimate interest in maintaining a safe and secure website. The ICO identifies IT security as a potential legitimate interest, provided its use is necessary and balanced against people’s rights.
Marketing
We will not add you to a marketing mailing list simply because you submitted an enquiry.
Where we offer email marketing, we will normally ask you to opt in separately. You can unsubscribe or withdraw your consent at any time.
5. Who we share information with
We do not sell your personal information.
We may share limited information with trusted service providers where necessary to operate the website or provide our services. These may include:
- Hostinger, which provides website hosting, domain and email services
- WPForms, which provides the contact-form software
- Cloudflare Turnstile, which helps protect the form from spam and automated submissions
- Wordfence and its provider Defiant, which provide firewall, malware-scanning and website-security services
- Professional advisers such as accountants, insurers or legal advisers
- Government, regulatory or law-enforcement bodies where disclosure is legally required
- Freelancers or suppliers involved in a project, where necessary and subject to appropriate confidentiality requirements
Information submitted through the contact form is delivered to our business email account. Depending on the website configuration, a copy may also be stored within the WordPress website.
Hostinger’s data-processing terms cover services including hosting and email, while Wordfence provides data-processing provisions for organisations using its security services.
6. International transfers
Some of our technology providers or their subcontractors may process information outside the United Kingdom.
Where information is transferred internationally, we expect appropriate safeguards to be used, such as:
- UK adequacy regulations
- The UK International Data Transfer Agreement
- The UK Addendum to approved standard contractual clauses
- Other safeguards permitted under UK data-protection law
7. How long we retain information
We retain personal information only for as long as reasonably necessary.
Our normal retention periods are:
- Unsuccessful or general enquiries: up to 12 months after the most recent contact
- Client, project, contract and invoice records: normally up to six years after the end of the client relationship
- Marketing information: until you unsubscribe, withdraw consent or the information is no longer required
- Website-security logs: for the period needed to protect the website and investigate security incidents
- Form submissions: in line with the relevant enquiry or client retention period
We may retain information for longer where required by law or where it is necessary to establish, exercise or defend a legal claim.
8. How we protect your information
We use reasonable technical and organisational measures to protect your information, including:
- HTTPS encryption
- Strong passwords
- Two-factor authentication
- Website firewall and malware scanning
- Spam and bot protection
- Restricted administrative access
- Software and plugin updates
- Website backups
No internet-based system can be guaranteed to be completely secure, but we take appropriate steps to reduce the risks of unauthorised access, loss or misuse.
9. Cookies and similar technologies
The website may use cookies or similar technologies that are necessary for:
- Core WordPress functionality
- Website security
- Spam prevention
- Contact-form operation
- Remembering necessary technical settings
Cloudflare Turnstile is used to help distinguish genuine visitors from automated form submissions. Wordfence may also process technical information to identify and block potentially malicious activity.
At the date of this policy, we do not intentionally use advertising cookies or behavioural advertising technology. If analytics, advertising pixels or other non-essential tracking are introduced, this policy and the website’s cookie controls will be updated.
UK guidance requires website operators to clearly explain storage and access technologies. Consent requirements depend on the nature and purpose of the technology, with different treatment for technologies that are strictly necessary or fall within another permitted exemption.
10. Your data-protection rights
Depending on the circumstances, you may have the right to:
- Ask for access to your personal information
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your information
- Ask us to restrict how your information is used
- Object to certain uses of your information
- Receive certain information in a portable format
- Withdraw consent where processing is based on consent
- Complain about how your information has been handled
Not every right applies in every situation. We may need to confirm your identity before responding to a request.
To exercise a right, email:
The ICO confirms that privacy notices should explain applicable rights, including access, correction, deletion, restriction, objection and data portability.
11. Complaints
Please contact us first if you have concerns about how your information has been handled:
You also have the right to complain to the Information Commissioner’s Office, the independent UK data-protection regulator.
12. Children’s information
The website and our design services are intended for businesses and adults.
We do not knowingly collect personal information from children. If you believe a child has provided personal information through the website, please contact us so that it can be reviewed and, where appropriate, deleted.
13. Automated decision-making
We do not use personal information to make solely automated decisions that have legal or similarly significant effects on individuals.
14. Links to other websites
The website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
You should review the relevant third party’s privacy policy before submitting personal information to them.
15. Changes to this policy
We may update this policy when our services, website technology or legal obligations change.
The latest version will be published on this page with an updated revision date.
16. Contact us
For questions, requests or complaints about this privacy policy or your personal information, contact:
KP Design Studio
Kerry Patterson
hello@madebykpdesign.com