Sidewinds Studio

Privacy Notice

Last updated: 11 October 2026

At Sidewinds Studio, we respect your privacy. This notice explains what personal information we collect, why we use it, who we share it with and your rights.

1. Who we are

Sidewinds Studio is a web design business operated by Callum Rosam trading as Sidewinds Studio, who is the data controller for the personal information described in this notice.

Address: 15 Queen Street, Telford, TF1 1EH
Email: hello@sidewinds.studio
Website: sidewinds.studio

2. Information we collect

When you submit a project enquiry, we collect your name, business name, email address and project description.

You may also provide your telephone number, existing website address, preferred deadline and other information relevant to your project.

If you become a customer, we may also collect information necessary to deliver our services, manage payments and maintain business records.

Our hosting provider may process technical information such as IP addresses, browser details and request timestamps when you access the website.

Please avoid including sensitive personal information in the project description unless it is necessary.

3. Why we use your information

We use personal information to:

• Respond to enquiries and prepare quotations.
• Discuss and deliver website projects.
• Communicate with customers and provide support.
• Manage invoices, payments and business records.
• Protect the security and operation of our website.
• Meet legal and accounting obligations.

Submitting an enquiry does not subscribe you to marketing emails. We do not sell your personal information.

4. Our lawful bases

We process personal information under UK data protection law using the following lawful bases, as appropriate:

Contract and pre-contractual steps: To prepare quotations, discuss services requested by an individual and fulfil customer agreements.

Legitimate interests: To respond to business enquiries, manage customer relationships, administer our business, prevent spam and maintain website security, where these interests are not overridden by individuals' rights.

Legal obligations: To comply with applicable accounting, tax and other legal requirements.

5. How we handle your information

Our website is hosted using Netlify, which also processes and stores enquiries submitted through our website enquiry forms. Enquiry notifications are delivered to our business email account through Google Workspace, which we use to manage correspondence.

We take reasonable measures to protect personal information, including using HTTPS and restricting access to business information.

We may also use relevant payment, accounting or other professional service providers when necessary to deliver services or comply with legal requirements.

6. International transfers

Some service providers, including Netlify and Google, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we rely on applicable adequacy arrangements or other appropriate safeguards, as required by UK data protection law.

You can contact us for further information about the safeguards relevant to your information.

7. How long we keep information

If you make an enquiry but do not become a customer, we normally retain your enquiry and related correspondence for 12 months after our last meaningful contact.

We may retain information for longer where reasonably necessary to resolve disputes, establish or defend legal claims, or comply with legal obligations.

For customers, we retain project information while providing our services and afterwards where necessary for legitimate business purposes or legal requirements.

Financial records are kept for the periods required by applicable law.

We review retained information and delete or securely dispose of it when it is no longer required.

8. Cookies and tracking

Our website does not currently include advertising trackers, behavioural analytics, third-party embedded content or non-essential cookies identified in its website code.

Fonts and website images are hosted locally.

Our hosting provider may process technical connection information needed to operate and protect the website.

If we introduce analytics or non-essential cookies in future, we will update this notice and provide any consent controls required by law.

9. Your rights

Depending on the circumstances, you have rights under UK data protection law, including the right to:

• Access personal information held about you.
• Correct inaccurate information.
• Request deletion of information.
• Restrict or object to certain processing.
• Request portability of eligible information.
• Withdraw consent where processing relies on consent.

These rights are subject to applicable legal conditions and exceptions.

To make a request, email hello@sidewinds.studio. We will normally respond within one month, as required by law.

10. Complaints

If you have concerns about how we use your information, please contact us so we can investigate.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at https://ico.org.uk.

11. Changes to this notice

We may update this notice to reflect changes to our business, services or legal obligations.

The latest version will be available on our website, with the revision date displayed above.