Privacy Policy.

1. Data We Collect

1.1 Information You Provide

When you use our website or engage our services, you may provide us with:

• Contact details: name, email address, phone number, postal address
• Project information: details about your property, design preferences, and budget
• Communications: messages sent through our contact form or email
• Payment information: billing details processed securely by our payment provider

1.2 Information We Collect Automatically

When you visit our website, we may automatically collect:

• Device and browser information (type, version, operating system)
• IP address and approximate location
• Pages visited, time spent, and navigation patterns
• Referral source (how you found our website)

2. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and provide requested information
• Provide, manage, and deliver our interior design services
• Process payments and manage our client relationship
• Send service-related communications (project updates, invoices, appointment reminders)
• Send marketing communications (only where you have given explicit consent)
• Improve our website and services through analytics
• Comply with our legal obligations

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: to perform the services you have engaged us to provide
• Legitimate interests: to manage client relationships, improve our services, and protect our business
• Legal obligation: to comply with applicable laws and regulations
• Consent: for marketing communications and non-essential cookies

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Client project data: retained for 7 years following project completion (for legal and accounting purposes)
• Enquiry data (non-clients): retained for 2 years from the date of enquiry
• Marketing data: retained until you withdraw consent
• Website analytics data: retained for 26 months

5. Your Rights

Under UK GDPR, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your data where we no longer have grounds to process it
• Restriction: request that we limit how we use your data
• Portability: request your data in a portable format
• Objection: object to processing based on legitimate interests or for direct marketing
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

6. Cookies

Our website uses cookies to improve your experience. Essential cookies are used without consent; non-essential cookies (analytics, preferences) require your consent. You can manage cookie preferences at any time through your browser settings.

7. Third-Party Services

We use carefully selected third-party services that may process your data, including website analytics providers, payment processors, and email communication tools. All third parties are required to process data in accordance with UK GDPR and our data processing agreements.

8. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Contact

For privacy enquiries, please contact our Data Controller at: [email protected] or write to: Mossfield Studio Ltd, 14 Harbour View, Bristol BS1 4PG, United Kingdom.