Privacy Policy

Last updated: 10 December 2024

1. Introduction

AH Creative ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are based at Bronleigh House, 6 Cadoxton Road, Neath, SA10 7AE, United Kingdom.

2. Information We Collect

Personal Information You Provide

When you contact us or book an appointment, we may collect:

• Name
• Email address
• Phone number
• Any other information you choose to provide in your message

Information Collected Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• IP address (anonymised)
• Pages visited and time spent on pages
• Referring website

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and messages
• Process your appointment bookings
• Improve our website and services
• Send you marketing communications (only with your consent)
• Comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights
• Legal obligation: Where processing is necessary to comply with the law

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except for trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential.

These service providers include:

• Nearcut: For appointment booking management
• Vercel: For website hosting and analytics
• Resend: For email communications

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Contact form submissions are retained for up to 2 years.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request restriction of processing in certain circumstances
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: www.ico.org.uk