Get in touch →
Polly.Sheldon/ Privacy
+ Legal · Last updated: 9 April 2026

Privacy Policy.

Who I am

This website is operated by Brandesign Ltd, a limited company registered in England & Wales, with Polly Sheldon as director. We provide creative direction, brand photography, brand identity design, website builds and personal branding services.

If you have any questions about this policy or how I handle your data, you can contact me at [email protected].

What data I collect

I may collect and process the following personal data:

  • Contact information - name, email address and phone number when you submit a contact form or enquiry
  • Payment information - processed securely via Stripe. I do not store your card details on my servers
  • Photos and images - photographs submitted as part of any brand project or studio session
  • Booking information - scheduling data when you book via Calendly
  • Technical data - IP address, browser type, pages visited and other analytics data collected automatically

How I use your data

I use your personal data to:

  • Respond to your enquiries and provide the services you have requested
  • Process payments securely through Stripe
  • Deliver project work including photography, design and web builds
  • Send occasional updates about my services (only where you have opted in)
  • Improve my website and understand how visitors use it

Legal basis for processing

Under UK GDPR, I process your data on the following legal bases:

  • Contract - processing necessary to fulfil a service you have purchased or requested
  • Legitimate interest - to run and improve my business and website
  • Consent - where you have explicitly opted in, such as marketing emails or non-essential cookies

Third-party services

I use the following third-party services that may process your data:

  • Stripe - for secure payment processing. Stripe Privacy Policy
  • Cloudflare - for website hosting, performance and basic analytics. Cloudflare Privacy Policy
  • Google Analytics - for understanding website traffic and usage. Google Privacy Policy
  • YouTube - for embedded video content. Videos are embedded using privacy-enhanced mode where possible
  • Calendly - for scheduling calls and bookings. Calendly Privacy Policy
  • Google Reviews - for displaying client testimonials

Cookies

This website uses cookies to function properly and to help me understand how visitors use the site. For full details about the cookies I use and how to manage them, please see my Cookie Policy.

How long I keep your data

  • Contact form submissions - kept for as long as necessary for business purposes, typically up to 3 years after last contact
  • Project files and deliverables - kept for the duration of our working relationship and a reasonable period afterwards
  • Payment records - kept for 6 years as required by HMRC for tax purposes
  • Analytics data - retained according to the policies of the respective analytics providers

Your rights

Under UK GDPR, you have the right to:

  • Access - request a copy of the personal data I hold about you
  • Rectification - ask me to correct any inaccurate or incomplete data
  • Erasure - ask me to delete your personal data (the "right to be forgotten")
  • Restrict processing - ask me to limit how I use your data
  • Data portability - request your data in a structured, commonly used format
  • Object - object to my processing of your data based on legitimate interest
  • Withdraw consent - where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email me at [email protected]. I will respond within one month.

Data security

I take reasonable measures to protect your personal data from unauthorised access, alteration or loss. This includes using HTTPS encryption across my website and only working with trusted third-party providers who maintain appropriate security standards.

Complaints

If you are not happy with how I handle your data, I would appreciate the chance to address your concerns directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

Changes to this policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.