Privacy Policy

1. Who we are

Core Media Design Ltd is a web design agency registered in England. Our registered address is 9 Valley Road, Clifton, Penrith, Cumbria, CA10 2FF. When we refer to "we", "us", or "our" in this policy, we mean Core Media Design Ltd.

2. What data we collect

We may collect and process the following personal data:

• Contact form submissions - your name, email address, and any telephone number, company name, message and note of how you heard about us that you choose to send.
• Usage data - information about how you browse our website, collected via Google Analytics (see section 5).
• Correspondence - if you email or phone us, we may keep a record of that communication.

3. How we use your data

We use your personal data to:

• Respond to enquiries you submit through our contact form.
• Provide, maintain, and improve our services.
• Understand how visitors use our website so we can improve the experience.

Our lawful basis for processing is legitimate interest (responding to enquiries and improving our services) and, where applicable, consent (analytics cookies).

4. Data sharing

We do not sell your personal data. We may share data with the following third parties solely to operate our services:

• Amazon Web Services (AWS SES) - to send transactional emails.
• Google Analytics - to collect anonymised usage data (see section 5).

5. Cookies

Our website uses the following cookies:

• Essential cookies - required for the website to function (e.g. CSRF protection, session management). These do not require consent.
• Analytics cookies - Google Analytics uses cookies to collect anonymised data about page views and visitor behaviour. These are only set if you consent via our cookie banner.

You can change your choice at any time here. Turning analytics off deletes its cookies.

6. Data retention

A contact form submission is not stored on our website. It is sent, encrypted, straight to our email inbox. If our email service is unavailable, the encrypted message is held for up to 7 days so it can be sent again, then deleted. The email itself is retained for up to 12 months after your enquiry has been resolved, unless a longer period is required for legal or contractual reasons. Analytics data is retained in accordance with Google's data retention settings.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request a copy of your data in a portable format.

To exercise any of these rights, please contact us at the address below.

8. Contact

If you have questions about this privacy policy or wish to exercise your data rights, please contact us:

Core Media Design Ltd
9 Valley Road, Clifton
Penrith, Cumbria, CA10 2FF
Phone: 077 900 522 86
Email: [email protected]

9. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.