Privacy Policy

Last updated: 11 July 2026

Michaela Curran Creative ("we", "us") is a web design business based in the United Kingdom. This policy explains what personal data we collect through this website and when you work with us, how we use it, and your rights. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we work with clients or visitors in the EU, the EU GDPR applies equivalently.

Data controller: Michaela Curran Creative
Address: 124 City Road, London, EC1V 2NX
Contact: admin@michaelacurrancreative.com

What we collect

When you book a discovery call or contact us: your name, email address, phone number (if provided), business name, and anything you include in your message or booking form.

When you become a client: the above, plus your business address, project content you supply (text, images, logos), payment records, and correspondence — including change requests sent to changes@michaelacurrancreative.com.

When you browse this site: technical data such as your IP address, browser type, device, pages visited, and how you found us, collected via cookies and analytics (see Cookies below).

We do not knowingly collect data from anyone under 16, and we do not collect special category (sensitive) data.

How we use it and our lawful bases

• To respond to enquiries and run discovery calls — legitimate interests (responding to people who contact us).
• To deliver your website project and care plan — performance of a contract.
• To invoice, keep accounting records, and meet tax obligations — legal obligation.
• To send occasional service updates or follow-ups you'd reasonably expect — legitimate interests. Marketing emails are only sent with your consent, and you can unsubscribe at any time.
• To understand how visitors use our site and improve it — consent (analytics cookies).

We never sell your personal data.

Who we share it with

We use trusted third-party services to run our business, each of which processes data on our behalf under their own safeguards:

• Calendly — scheduling discovery calls
• Stripe — processing payments (we never see or store full card details)
• Netlify — website hosting
• Google Workspace — email
• Google Analytics — website analytics
• Professional advisers (e.g. accountant) and authorities where legally required

International transfers

Some of our providers are based in the United States. Where personal data is transferred outside the UK or EU, we rely on safeguards such as the UK–US Data Bridge / EU–US Data Privacy Framework or the International Data Transfer Agreement / Standard Contractual Clauses.

How long we keep it

• Enquiries that don't become projects: up to 12 months, then deleted.
• Client project records and correspondence: for the duration of the project and up to 6 years afterwards (for legal and accounting purposes).
• Analytics data: per the retention settings of our analytics provider, typically no more than 26 months.

Cookies

This site uses essential cookies (required for the site to function) and, with your consent, analytics cookies that help us understand how the site is used. You can decline or withdraw consent via the cookie banner, and manage or delete cookies in your browser settings at any time.

Your rights

Under UK GDPR (and EU GDPR where applicable), you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a usable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email admin@michaelacurrancreative.com. We'll respond within one month. There's no fee unless a request is manifestly unfounded or excessive.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113. EU residents may complain to their local supervisory authority.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date above updated accordingly.