Privacy Policy

Last updated: 6 August 2026

Contents

  1. Who we are
  2. Data we collect
  3. How we use your data
  4. Legal basis for processing
  5. Data sharing
  6. Cookies and analytics
  7. Data retention
  8. Your rights
  9. Contact & complaints

1. Who We Are

This Privacy Policy applies to RIRI CREATIVE, a freelance web design and SEO studio operated by Rhiannon Frost, trading as RIRI CREATIVE ("we", "us", "our").

Website: https://riricreative.co.uk
Email: rhiannon@riricreative.co.uk

We are the data controller for any personal data collected through this website. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect personal data in the following ways:

When you contact us (via the contact form or email):

  • Your name
  • Your email address
  • Your phone number (if provided)
  • The content of your message
  • Business name and website URL (if provided)

Automatically when you visit the website (via Google Analytics):

  • IP address (anonymised)
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referring website or search engine
  • Approximate geographic location (country/city level)

3. How We Use Your Data

We use the data we collect to:

  • Respond to your enquiry and provide quotes or information
  • Communicate throughout the course of a project
  • Send invoices and manage project administration
  • Understand how people use our website so we can improve it (analytics only)
  • Comply with legal obligations

We do not use your data for automated decision-making or profiling. We do not send marketing emails unless you have explicitly opted in.

Under UK GDPR, we rely on the following lawful bases for processing your data:

  • Legitimate interests — processing your enquiry and managing our business relationship
  • Contract performance — processing data necessary to deliver a project you have engaged us for
  • Legal obligation — retaining financial records as required by UK law
  • Consent — for analytics cookies (where consent is required)

5. Data Sharing

We do not sell your personal data to third parties. We may share your data with trusted service providers who assist us in running our business, including:

  • Google Analytics — website traffic analysis (data anonymised; governed by Google's privacy policy)
  • Email providers — to send and receive email correspondence
  • Accounting software — for invoicing and financial record-keeping

All third-party providers are contractually required to handle your data securely and in compliance with UK GDPR.

We may disclose your data if required to do so by law, or to protect our legal rights.

6. Cookies and Analytics

This website uses Google Analytics 4 (GA4) to collect anonymised data about how visitors use the site. This helps us understand which pages are most useful and how to improve the user experience.

Google Analytics uses cookies to track visitor sessions. The data collected is anonymised and aggregated — we cannot identify individual visitors from this data.

You can opt out of Google Analytics tracking by:

We do not use advertising cookies, tracking pixels, or any cookies for marketing purposes.

7. Data Retention

We retain your personal data only for as long as necessary:

  • Enquiries that don't proceed to a project: deleted after 12 months
  • Project correspondence and files: retained for 6 years after project completion (UK legal requirement for business records)
  • Financial records (invoices): retained for 6 years as required by HMRC
  • Analytics data: retained for 14 months in Google Analytics (GA4 default), after which it is automatically deleted

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request we correct any inaccurate data
  • Right to erasure — request deletion of your data (subject to legal obligations)
  • Right to restrict processing — ask us to limit how we use your data
  • Right to data portability — request your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please email rhiannon@riricreative.co.uk. We will respond within 30 days.

9. Contact & Complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Rhiannon Frost — RIRI CREATIVE
Email: rhiannon@riricreative.co.uk

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

This Privacy Policy was last updated on 6 August 2026. We may update it from time to time — the date above will always reflect the most recent version.