Last updated: 9 May 2026
This privacy policy explains how Allen Creative collects, uses and protects personal information when you visit allencreative.co.uk or get in touch with us. We’ve tried to keep it short and plain, but if anything is unclear please email us — details below.
Allen Creative Ltd is the data controller for the personal information described in this policy.
A “data controller” is the organisation that decides why and how your personal data is processed.
We only collect personal data where we have a clear purpose for doing so. The categories below are the only routine ways we collect data through this website.
/get-in-touch/)We collect the name, email address and message content you submit. We use this solely to reply to your enquiry and, if it leads to a working relationship, to manage that relationship. The lawful basis is your consent (when you press Send) and, where relevant, the steps necessary to enter into a contract with you.
Like most websites, our hosting and analytics tools log limited technical data — such as your IP address, browser type, device type, the pages you view and the time you spend on them. This is used to keep the site secure and to understand how visitors use it so we can improve it. The lawful basis is our legitimate interest in operating and improving a secure website, and your consent where cookies are involved (see Cookies below).
We keep a record of correspondence so we can respond properly and maintain a history of any work we do for you. Lawful basis: legitimate interest, and where relevant, performance of a contract.
We do not knowingly collect special category data (health, ethnicity, religion etc.) through this website. Please do not include such information in contact-form submissions.
Our website uses cookies and similar tracking technologies. We use a consent banner (Complianz) to let you accept or reject non-essential cookies. Full details — including the specific cookies used, their purpose and duration — are in our separate Cookie Policy.
In short:
You can change your cookie preferences at any time using the Manage consent link in the website footer.
We do not sell your personal data. We share it only with the following categories of recipients, and only as needed:
| Recipient | Purpose | Where they’re based |
|---|---|---|
| Our website host | Hosting the site and storing form submissions | UK / EEA |
| Google (Google Analytics, Google Fonts, Google Tag Manager) | Website analytics and standard web fonts, only with your cookie consent | USA (covered by the UK Extension to the EU–US Data Privacy Framework) |
| Fluent CRM (self-hosted on our website) | Storing enquiries and managing client communications | UK / EEA — data stays on our website’s hosting |
| HMRC, our accountants, and other professional advisors | Where we have a legal obligation or legitimate need (e.g. tax records for invoiced clients) | UK |
| Law enforcement or regulators | Only where we are legally required to disclose | UK |
We do not share your data with third parties for their own marketing purposes.
Where data is transferred outside the UK (for example, to Google in the United States for analytics), we rely on the UK Extension to the EU–US Data Privacy Framework, or on Standard Contractual Clauses approved by the UK Information Commissioner. These mechanisms are designed to give your data a level of protection equivalent to UK law.
| Data | Retention period |
|---|---|
| Contact-form enquiries that don’t become projects | 24 months from last contact, then deleted |
| Client records (correspondence, project files, invoices) | 7 years after the end of the engagement, to meet HMRC and accounting record-keeping rules |
| Website analytics data | As per Google Analytics defaults (we do not retain identifiable analytics data ourselves) |
| Server access logs | Typically 30 days, then overwritten |
If you ask us to delete your data sooner, we will do so unless we have a legal obligation to retain it.
Under the UK GDPR and the Data Protection Act 2018 you have the following rights:
To exercise any of these rights, email michelle@allencreative.co.uk. We will respond within one calendar month. There is normally no charge.
We will only send you marketing emails (e.g. newsletters or service updates) if you have specifically opted in. Every marketing email will include a one-click unsubscribe link. Replying to a project enquiry is not the same as opting in to marketing.
We take reasonable technical and organisational steps to protect your data — including HTTPS encryption on the website, access controls, regular software updates, and staff care over how data is handled. No system is perfectly secure, but we treat your data carefully and will tell you (and the ICO) promptly if anything goes wrong.
This website is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe we hold data about a child, please contact us and we will delete it.
We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. Material changes will be highlighted on the website.
If you’re unhappy with how we’ve handled your data, please contact us first so we have the chance to put things right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator: