Privacy
Short version: I use what you send me to reply to you, I keep it in my own systems, and I do not sell it, share it or add you to a mailing list.
Ferris Creative LTD, company number 14585804, registered in England and Wales at Forest Row, East Sussex, RH18 5HG, is the data controller for anything you send through this site. In practice that means me, Morgan Loughton. There is nobody else.
If you want to ask about any of this, email morgan@ferriscreative.co.uk or call 07983 175730. You will get me, not a form.
If you use the enquiry form, I collect your name and email address, which are required, and your business name, phone number, current website, and whatever you tell me about the project, all of which are optional. I collect it so I can reply to you with a price and a date. That is the only reason.
The lawful basis is your consent, which is the tick box on the form, and legitimate interest in replying to somebody who has asked me a question. You can withdraw consent at any time by emailing me and I will delete everything.
If you email or call me instead, I hold whatever is in that email or the note I make of the call, for the same reason.
Form submissions are sent to a Google Apps Script endpoint and written into a private Google Sheet that only I can open. I also get an email copy. If we go on to work together, your details move into the client section of that same sheet so I can keep track of the job.
Google is therefore a processor for this data, under their own terms. Nothing is sent to any other company, any advertising platform or any AI service. Your enquiry is not used to train anything.
If you enquire and we do not end up working together, I delete your details within twelve months. If we do work together, I keep the client record for six years after the last invoice, because HMRC requires business records to be kept that long.
You can ask me to delete your details sooner and I will, unless I am legally required to keep an invoice record.
I use Google Analytics to see which pages people find useful, and Google Ads measurement to see whether the adverts I pay for actually lead to anyone getting in touch. Both would set cookies, and neither sets one until you have agreed.
Before you answer, the measurement code is loaded but switched off. It stores nothing on your device, reads nothing from it, and tells Google only that a page was looked at, with no identifier attached to it. The distinction matters: the law is about what gets stored on your device, and until you say yes nothing does.
If you say no, that stays true permanently. You will not be asked again, and nothing about the site changes.
If you say yes, what it tells me is which pages are read, roughly where in the country visitors are, whether they arrived from a search, a link or an advert, and whether a visit ended in an enquiry. It does not tell me who you are.
There is one more thing worth explaining, because most privacy policies leave it out. When somebody arrives from one of my Google adverts, the web address they arrive on carries a click reference from Google. If they go on to send me an enquiry, that reference is saved alongside it, so I can tell which adverts are worth paying for and which are wasting money. It identifies the advert, not the person, and it only exists if you came from an advert and chose to get in touch.
There is still no Facebook pixel, no session recording, and nothing that follows you around other websites. I have deliberately left off the Google setting that would join this up with profiles held elsewhere.
You can change your mind at any time. If you said yes and would rather not have, or you said no and have reconsidered, use the button at the bottom of this page and you will be asked again.
Under UK GDPR you can ask me for a copy of everything I hold about you, ask me to correct it, ask me to delete it, or object to me holding it at all. Email me and I will do it within a month, usually the same week. There is no charge.
If you are not happy with how I have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. I would rather you told me first so I can fix it.
This policy covers ferriscreative.co.uk only. If you are a customer of a business whose site I built, that business is the controller of your data and you should contact them, not me.
Where I have access to a client’s systems in order to do the work, I treat anything I see there as confidential and I do not copy it anywhere.