Privacy Policy

KAPS Design (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Who We Are

KAPS Design is a sole trader business based in London, UK, providing web design, photography, and videography services. You can contact us at [email protected].

2. Data We Collect

We may collect the following information:

• Name and email address (via contact or lead-capture forms)
• Phone number (if you choose to provide it)
• Company name and job role
• Message content and project details you share with us
• Technical data: IP address, browser type, referring URL (via server logs)

3. How We Use Your Data

We use the data you provide to:

• Respond to your enquiries and provide our services
• Deliver gated content (PDF documents) you have requested
• Send service-related communications
• Improve our website and understand how visitors use it
• Meet our legal obligations

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

• Consent — when you submit a form
• Legitimate interests — for responding to enquiries and improving our service
• Contract — when we are engaged to provide services

5. Data Retention

Contact and lead-capture form data is retained for up to 24 months after last contact, unless you request earlier deletion. Client project data may be retained for up to 7 years for accounting and legal purposes.

6. Third-Party Services

We use the following trusted third-party services that may process your data:

• Render — website hosting (US-based, EU SCCs in place)
• MongoDB Atlas — database (cloud-hosted)
• Resend — transactional email delivery
• Cloudflare R2 — file storage

7. Cookies

We use cookies to improve your experience and analyse how the site is used. The table below shows all cookies we may set. Analytics cookies are only set with your explicit consent. You can change your preferences at any time via the cookie banner.

8. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (“right to be forgotten”)
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Changes to This Policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.