Privacy notice.

This notice explains what personal data Ionic Creative Design collects, why we collect it, how long we keep it and the rights you have over it. It covers people who visit this website, get in touch with us, become our clients or supply us.

Ionic Creative Design Ltd ("Ionic", "we", "us") is the controller of the personal data described here. We are a company registered in Northern Ireland, company number NI677800, and we are registered with the Information Commissioner's Office under reference ZB400486. Our registered office is listed in clause 1.1 of our terms.

Ionic is a two-person studio, so any question about your data goes straight to our director, Gareth Day: email gareth@ioniccreativedesign.com or ring 07921 826888.

Our website forms ask for the following:

• Start a project: your name, business, email address, phone number, the services you are interested in and a message.

• Free Digital Health Check: your name, business, email address, phone number, your biggest constraint, whether you would like to meet in person or on Teams, and the days or times that suit you.

• SEO audit request: your name, business, email address, phone number, your website address, the searches that matter to you and where your customers are.

• Free Diagnostic Consultation: your name, phone number and email address.

• Callback request: your name, phone number, business, when suits you and what it is about, plus the page you sent it from.

Each form marks its required fields. Your name is always required. The project, health check and audit forms also need your email address (the audit needs your website address too), the callback form needs your phone number, and the consultation form needs both. We also receive whatever you tell us by email, phone or in person.

We use these details to reply, give you advice or a quote, and arrange a call or meeting. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in answering business enquiries.

A hidden field on each form filters out spam, so your details are not passed to a third-party spam service.

We keep the names and contact details of the people we work with, billing details, contracts, project records and our correspondence. Our lawful basis is performing our contract with you, and our legal obligation to keep accounting and tax records.

When we build, host or manage a website or system for a client, we may handle personal data on their behalf, such as the enquiries their own customers send through their site. The client is the controller of that data and their privacy notice applies to it. We act as their processor under Part C of our terms.

Our hosting provider records technical information about each visit, such as your IP address, browser and the pages requested, to keep the website secure and working. Our lawful basis is our legitimate interest in running a safe website.

If you accept analytics cookies, Google Analytics 4 records how visitors use the site: the pages viewed, the type of device, approximate location and how you arrived. Nothing is recorded until you give consent, and you can withdraw it at any time through the cookie settings. Our lawful basis is your consent. Our cookie policy lists the cookies involved.

When we advertise on Google and on Meta (Facebook and Instagram), and only if you accept advertising cookies, the Google Ads tag and the Meta Pixel record that you visited this site and whether you sent an enquiry through one of our forms. We use this to measure which adverts work and to show our adverts to people who have visited the site. Our Google Analytics account is linked to Google Ads for the same purposes, and only shares data for advertising if you have accepted advertising cookies.

If you have accepted advertising cookies and then send us an enquiry through one of our forms, the Google Ads tag also sends Google the email address and phone number you entered, in a hashed (scrambled) form. Google uses them to match your enquiry to the advert that led to it, so we can see which adverts bring enquiries. This is called enhanced conversions. If you have not accepted advertising cookies, nothing is sent.

Nothing is recorded for advertising until you give consent, and you can withdraw it at any time through the cookie settings. Our lawful basis is your consent. Google and Meta also use some of this data for their own purposes, under the Google privacy policy and the Meta privacy policy.

We do not send marketing emails at present. If we start, we will only email people who have agreed to hear from us, and existing clients about services similar to those they already buy from us. Every email will tell you how to unsubscribe, and you can opt out at any time by replying or emailing us. Our lawful basis will be your consent or, for existing clients, our legitimate interest as the law allows.

We do not sell personal data. We share it only with the providers who help us run the business, under contracts that require them to protect it, and with others where the law requires it:

• SiteGround, which hosts this website and stores form entries.

• Microsoft, which provides our email and Teams through Microsoft 365.

• Google, for Google Analytics and Google Ads, only where you have consented.

• Meta, for advertising on Facebook and Instagram, only where you have consented.

• Our accountants, bank and professional advisers, where they need it to provide their services to us.

• HMRC, regulators, courts or the police, where we are legally required to share it.

Microsoft, Google and Meta may process personal data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations, including the UK extension to the EU-US Data Privacy Framework, or by the Information Commissioner's international data transfer agreement or addendum.

• Website form entries: deleted automatically from the website after 90 days.

• Emails sent by the website (including the form notifications we receive): a copy is kept in the website's email log for 14 days, then deleted. They are sent through our Microsoft 365 account.

• Enquiries that do not lead to work: deleted 12 months after our last contact.

• Client and supplier records: kept for six years after our last engagement ends, to meet tax rules and in case of legal claims.

• Google Analytics data: kept for 14 months, then deleted automatically.

• Advertising data: the cookies expire as listed in our cookie policy; Google and Meta keep the data they receive under their own policies.

You have the right to:

• ask for a copy of the personal data we hold about you

• ask us to correct data that is wrong or incomplete

• ask us to delete your data

• ask us to restrict how we use it

• object to our use of it, including for marketing and advertising

• ask for data you gave us in a format you can take elsewhere

• withdraw consent at any time, where we rely on consent

To use any of these rights, email or ring Gareth using the details above. There is normally no charge, and we will reply within one month. We do not make decisions about you by automated means.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We will update this notice when how we use personal data changes. This version was last updated on 8 October 2026.