Who we are
This website is run by Grivo Designs LTD (“Grivo”, “we”, “us”), a company registered in England and Wales under company number 17036972. We are the controller of the personal data described in this policy and are registered with the Information Commissioner’s Office (ICO) under registration number ZC114903.
What we collect
Information you give us
- Call bookings: your name, email address, phone number, company or website, the topic of your project, any notes you add, and the time you choose.
- Messages: your name, email address and the content of your message when you use the contact form or email us.
- Client projects: contact and billing details, and the materials you share with us so we can deliver the work.
Information collected automatically
- Technical data: our hosting provider processes your IP address, browser type and the pages you request, so the site can be delivered securely.
- Analytics: only if you accept analytics in the cookie banner, we collect anonymised usage data such as pages viewed and how you arrived. See our cookie policy.
- Preferences in your browser: your cookie choice and light or dark theme are saved on your own device, not on our servers.
We do not knowingly collect data from children, and we do not collect special category data.
How and why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Answering your enquiry and arranging an intro call | Steps at your request before entering into a contract; legitimate interests in responding to business enquiries |
| Delivering and invoicing a project | Performance of a contract |
| Keeping business and tax records | Legal obligation |
| Keeping the website secure and working | Legitimate interests |
| Analytics to improve the website | Consent, which you can withdraw at any time |
| Sending you news or marketing emails | Consent. We only do this if you opt in |
We never sell your personal data, and we do not use it for automated decisions that significantly affect you.
International transfers
Some of our providers are based outside the UK, mainly in the United States. Where your data is transferred, we rely on a UK adequacy decision (including the UK Extension to the EU–US Data Privacy Framework) or on approved safeguards such as the International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries and bookings that don’t lead to a project: up to 12 months, then deleted.
- Client and billing records: six years after the end of the financial year they relate to, as required for UK tax purposes.
- Google Analytics data: 14 months, then deleted automatically.
- Microsoft Clarity data: up to 13 months; session recordings are deleted after 30 days.
Confirm these periods match how Grivo actually works before launch.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where there’s no reason for us to keep it;
- restrict or object to how we use it, including for direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
Email info@grivodesigns.co.uk to use any of these rights. We’ll respond within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, though we’d appreciate the chance to put things right first.
Security
The site is served over HTTPS, access to client data is limited to the people who need it, and our providers are chosen for their security standards. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you and the ICO about any serious breach as the law requires.
Changes and contact
We may update this policy when our services or the law change. The date at the top shows the latest version. Questions? Email info@grivodesigns.co.uk.