1. The short version
I collect the minimum needed to reply to you and run the service: your name, business name, email, and website if you share them. I don't sell data, I don't run advertising trackers on this site, and you can ask for your data or its deletion at any time by emailing rafael@anjos.studio.
2. What I collect and why
Audit and contact requests: name, business name, email, and optionally your website and phone number — used solely to carry out the audit and respond to you. Lawful basis: taking steps at your request before entering a contract (UK GDPR Art. 6(1)(b)) and legitimate interest in responding to enquiries.
Clients: contact and billing details needed to deliver services and meet legal obligations such as accounting records. Lawful basis: contract and legal obligation.
Payments: handled by payment providers (GoCardless, PayPal, or your bank). I never see or store your full card or bank details; each provider processes your data under its own privacy policy.
3. Cookies
This site aims to be boring about cookies, in the good way:
- Essential cookies: the website platform may set strictly necessary cookies (for example, if you log in or submit a form). These don't track you across the web and don't require consent.
- Analytics: if privacy-respecting analytics are added in future, this page will be updated first, and any tool requiring consent will ask for it before setting anything.
- Third-party requests: the site loads its typeface from Google Fonts, which means your browser requests a file from Google and Google receives your IP address as part of that request, under Google's privacy policy.
- Affiliate links: some blog posts contain affiliate links. If you click one, the partner's site may set a cookie to attribute any purchase; this happens on their site under their privacy policy, and posts containing such links carry a visible disclosure.
You can block or delete cookies in your browser settings at any time; the site will keep working.
4. How long I keep data
Enquiry data: up to 12 months after our last contact, then deleted. Client and billing records: 6 years, as required for UK tax and accounting purposes. Email correspondence: retained while relevant to our relationship.
5. Who data is shared with
Only service providers needed to operate: hosting, email, and payment processors. No data is sold or shared for marketing. Some providers may process data outside the UK; where they do, transfers rely on recognised safeguards such as adequacy decisions or standard contractual clauses.
6. Your rights
Under UK GDPR you can request access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. Email rafael@anjos.studio and I'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though I'd appreciate the chance to resolve anything directly first.
7. Changes
Any changes to this policy appear on this page with an updated date at the top.