Privacy Policy

Last Updated: July 2026

1. Who We Are

Inkbot Design (“we”, “us”, or “our”) is the data controller responsible for your personal data.

Controller details: Inkbot Design, the trading name of Stuart Crawford

  • Postal address: 2 Lord Warden’s Ct, Bangor BT19 1GJ, United Kingdom
  • Email: hello@inkbotdesign.com

We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, what we do with it, and the rights you have over it. It applies to inkbotdesign.com and to our business communications.

In Plain English: We’re a design agency, not a data broker. We collect only what we need to run the website and the business; we never sell it, and this page explains exactly what happens to it.

2. The Data We Collect

We collect and process the following categories of personal data:

  • Identity Data: first name, last name, business name, job title.
  • Contact Data: email address and, if you provide it, telephone number.
  • Technical Data: IP address, browser type and version, device type, time zone, and pages visited — collected via analytics cookies only if you consent via our cookie banner.
  • Transaction Data: if you become a client, records of payments, invoices, and services provided will be kept.
  • Prospect Data: if we contact you about our services, we will gather limited professional information from publicly available sources (see Section 5).

We do not collect special category data — details about your race, ethnicity, religious beliefs, sexual orientation, or health.

In Plain English: Browse the site and, if you accept cookies, we see anonymous-ish patterns like “someone in Manchester read three branding articles.” Fill in the contact form, and we’ll see what you typed. Become a client, and we keep the paperwork. That’s it.

3. Cookies

This Site uses cookies and similar technologies. Strictly necessary cookies run without consent; analytics and marketing cookies run only after you consent via the cookie banner, and you can change or withdraw your consent at any time using the cookie settings link in the Site footer.

Full details of every cookie we use, its purpose, and its duration are set out in our Cookie Policy.

In Plain English: The banner you saw when you arrived isn’t decoration — nothing measures you here unless you say yes, and you can change your mind whenever you like.

4. How and Why We Use Your Data

We only use your personal data where the law allows. Our lawful bases are:

  • Consent — for analytics and marketing cookies, and for any email newsletter you sign up to. You can withdraw consent at any time.
  • Contract — to respond to your enquiry, prepare proposals, and deliver services you have engaged us for.
  • Legitimate interests — to run and secure the website, improve our services, and contact business prospects about services relevant to their organisation (see Section 5), provided your rights do not override those interests.
  • Legal obligation — to keep tax and accounting records.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

In Plain English: Email us, and we use your address to reply. Hire us, and we will use your data to invoice you and deliver the work. When browsing with cookies accepted, and we use the patterns to make the site better. No robots decide anything about you.

5. Business Prospects: Data We Collect From Public Sources

If we believe our services may be relevant to your organisation, we may contact you at your professional email address. In doing so, we may hold limited data about you gathered from publicly available sources — such as your company website, professional directories, or LinkedIn — limited to your name, job title, organisation, and business contact details.

Our lawful basis is legitimate interests: marketing relevant business services to professionals in a business context. We contact business (corporate) email addresses in accordance with the Privacy and Electronic Communications Regulations. Every message we send includes a straightforward way to opt out, and if you object or opt out, we stop and suppress your details so you are not contacted again.

In Plain English: If we’ve emailed you out of the blue, it’s because your firm looked like a genuine fit and your details were publicly listed. We researched you personally — no bought lists, no scraped databases. Reply “no thanks” or hit unsubscribe, and you’ll never hear from us again. Promise.

6. Who We Share Data With

We never sell, trade, or rent your personal data. We share it only with service providers who help us run the business, under contracts requiring them to protect it:

  • Website hosting and content delivery — our UK-based hosting provider and its content delivery network keep the Site online and fast.
  • Form provider — our contact and enquiry forms are operated by a third-party form service that processes your submission and delivers it to us.
  • Analytics — Google Analytics, only where you have consented, with IP anonymisation enabled.
  • Email and productivity — the providers we use to send, receive, and store email.
  • Outreach platform — the email platform we use for business-to-business communications described in Section 5.
  • Accounting and payment — providers who process invoices and payments if you become a client.

We may also disclose data where required by law.

In Plain English: Your data touches the tools every small agency uses — the web host, the form tool, the email system, and the bookkeeping software. Each one is contractually bound to look after it. Nobody gets your email address just to sell you things.

7. International Transfers

Some of our service providers (such as Google) are based outside the UK. Whenever your data leaves the UK, we ensure it is protected by at least one of the following safeguards:

  • transfer to a country covered by UK adequacy regulations;
  • the UK Extension to the EU–US Data Privacy Framework (the “UK–US Data Bridge”), for certified US providers; or
  • the UK International Data Transfer Agreement or Addendum (the UK’s approved standard contractual clauses).

In Plain English: The internet is global, and some of your data will sit on servers in the USA because that’s where Google keeps it. UK law has approved mechanisms for exactly this, and we only use providers covered by them.

8. Data Retention

We keep personal data only as long as necessary for the purpose it was collected, including legal, accounting, and reporting requirements:

  • Analytics data: retained for 2 months and then deleted.
  • Enquiry data: if you contact us but don’t become a client, we delete your enquiry within 24 months of our last exchange.
  • Client data: identity, contact, and transaction records are kept for 6 years after the engagement ends, as required by UK tax law.
  • Prospect data: deleted or suppressed promptly if you object or opt out; otherwise, reviewed and purged periodically.

In Plain English: We don’t hoard. Visitors evaporate from our analytics within months. Enquiries that go nowhere get deleted. Client invoices stay for 6 years because HMRC says so, not because we’re sentimental.

9. Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, and reputable UK and international providers. No method of transmission or storage is completely secure, but we take the protection of your data seriously and act promptly if we become aware of any incident.

In Plain English: Sensible locks on sensible doors. Nothing on the internet is 100% bulletproof, but we don’t leave your data lying around.

10. Your Legal Rights

Under UK GDPR, you have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • erase your data (“the right to be forgotten”);
  • restrict how we process your data;
  • object to processing based on legitimate interests, including direct marketing — if you object to marketing, we will always stop;
  • port your data to another provider in a structured, machine-readable format; and
  • Withdraw consent at any time, where consent is our lawful basis.

To exercise any of these rights, email hello@inkbotdesign.com. We will respond within one month. There is normally no fee.

You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO) — ico.org.uk — although we’d appreciate the chance to resolve any concern directly first.

In Plain English: It’s your data. Ask us what we hold, tell us to fix it, delete it, or stop emailing you — and we will, within a month, for free. If you think we’ve handled your data badly and we can’t sort it out between us, the ICO is the regulator you complain to.

11. Third-Party Links

This Site links to third-party websites, plug-ins, and applications. Clicking those links may allow third parties to collect data about you under their own privacy policies, which we do not control and are not responsible for.

In Plain English: Once you leave our site, the destination’s privacy rules apply, not ours.

12. Children

This Site and our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us, and we will delete it.

In Plain English: This is a B2B branding site, not a playground. We don’t want or collect children’s data.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. Significant changes may also be flagged on the Site.

In Plain English: The date at the top always tells you when this page last changed.

14. Contact

Questions about this policy or our privacy practices:

  • Email: hello@inkbotdesign.com
  • Post: 2 Lord Warden’s Ct, Bangor BT19 1GJ, United Kingdom
  • Contact page: https://inkbotdesign.com/contact/

The Only Question That Matters

Is your brand earning its place in the room?

Find out in writing. A structured audit of your brand — and the three revenue leaks costing you the most — delivered to your inbox within 48 hours, from the strategic branding agency behind £110M+ in client revenue across 21 countries.

WRITTEN DIAGNOSTIC · DELIVERED IN 48 HOURS · NO SALES CALL · NO OBLIGATION