Clear information about your information.

Who is responsible for your information?

Josh Huxham, a sole trader trading as Caradon Creative, is the data controller for the personal information described in this notice. Caradon Creative is independent of Tack & Jibe Ltd.

Questions about privacy can be sent to hello@caradoncreative.com.

What information is collected?

Caradon Creative may collect information that you provide through:

• the public project enquiry form;
• a project briefing or onboarding form;
• email, telephone, video calls or meetings;
• documents and assets supplied for a proposed or active project.

This can include your name, business name, email address, telephone number, preferred contact method, project requirements, budget range, desired timing, website details and other information needed to understand or deliver the work.

Please do not submit passwords, payment-card details, special-category personal data or information about other people unless it is genuinely necessary and you are authorised to provide it.

Why is the information used?

Information is used to:

• review and respond to enquiries;
• assess whether a project is suitable and prepare a proposal;
• plan, deliver and support an agreed project;
• maintain business, contractual and financial records;
• protect the website and forms from misuse, fraud and spam;
• meet legal and regulatory obligations.

The usual lawful bases are legitimate interests in operating and protecting the business, taking steps at your request before entering a contract, performing a contract, and complying with legal obligations. Information submitted for a project enquiry is not added to a marketing list unless separate permission is requested and given.

Who receives the information?

Information is not sold. It may be handled by carefully selected service providers used to operate the website and project workflow, including:

• Vercel for website hosting and delivery;
• Resend for delivering enquiries and acknowledgement emails;
• Cloudflare for DNS, email forwarding and form-abuse protection;
• the private email service used to receive and retain business correspondence;
• professional advisers or specialist project collaborators where necessary.

Website form submissions are delivered by email and are not stored in a separate website enquiry database. Email providers may retain message and delivery records in accordance with their own service terms and retention settings.

Collaborators receive only the information needed for their work and are expected to keep it confidential. Information may also be disclosed where required by law or needed to establish, exercise or defend legal rights.

International transfers

Some technology providers may process information outside the United Kingdom. Where this happens, Caradon Creative relies on the provider's contractual and legal safeguards for international transfers, such as UK adequacy regulations or approved contractual clauses.

How long is information kept?

The working retention rules are:

• enquiries that do not become projects are normally deleted within 12 months of the last meaningful contact;
• project briefs that do not proceed follow the same 12-month review period;
• records relating to active and completed client work may be retained for up to seven years where needed for contractual, tax, insurance or legal purposes;
• information is deleted sooner where there is no longer a lawful reason to keep it.

Security

Reasonable technical and organisational measures are used to protect personal information. These include access controls, encrypted HTTPS connections, maintained software, managed infrastructure and automated form-abuse checks. No internet service can be guaranteed to be completely secure, but access is limited to people and providers who need it.

Cookies and analytics

The public website does not currently use advertising cookies. Strictly necessary technologies may be used for security, including Cloudflare Turnstile on public forms. If optional analytics or marketing technologies are introduced, visitors will be given appropriate information and controls before non-essential storage is used.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to request access, correction, deletion, restriction, objection or portability of your personal information. You may also withdraw consent where consent is the lawful basis.

To exercise a right, email hello@caradoncreative.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.