privacy/
How we look after your data
Cirrus Design Studio Ltd is registered with the Information Commission (the ICO, formerly the Information Commissioner’s Office), and in all cases we comply with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).
Any data collected, stored or used by Cirrus Design Studio Ltd is handled in full compliance with UK GDPR and the ICO’s guidance. We never use your data outside the purpose for which it was collected, we never sell it, and we will not add you to a mailing list.
- ICO registered
- UK GDPR compliant
- No data sold or shared for marketing
- Cookies only with your consent
- Forms protected from spam
- No decisions made by AI alone
- Last updated: 9 November 2026
who we are/
The data controller
The data controller for this website is Cirrus Design Studio Ltd, a company registered in England and Wales (company number 11833982).
Registered office: 36 Tarrant Close, Poole, Dorset, England, BH17 9DN
Head office: Telephone House, 18 Christchurch Road, Bournemouth BH1 3NE
questions about your data/
Email hello [at] cirrusdesignstudio [dot] co [dot] uk or call 01202 028 608.
what we collect/
The information we hold and why
When you contact us
If you email or phone us, we keep your name, contact details and what you tell us about your enquiry, so we can reply and, if you go ahead, deliver your project. The lawful basis is our legitimate interest in answering enquiries, or the contract with you.
When you visit the website
Our own visitor statistics count which pages are viewed and the page you came from. They set no cookies, do not store your IP address and cannot identify you.
When you use our website health check
We use the website address you enter to run the check, and we don’t store the address or the results. It’s sent to Google for its speed test, when that test runs. Google reCAPTCHA helps protect the tool from automated use. To limit misuse, we keep a scrambled version of your IP address for up to 24 hours.
With your consent
Google Analytics and Google’s advertising measurement only run if you choose them in our cookie banner (see below). You can change your mind at any time.
cookies/
Cookies and your choices
When you first visit, a banner asks how we may use cookies. Google Analytics and advertising measurement don’t load until you choose them, so nothing is sent to Google for them before then.
- Accept all: analytics and advertising measurement
- Analytics only: Google Analytics, no advertising cookies
- Reject all: no analytics or advertising cookies at all
- To change your choice at any time, use the Cookie settings link in the footer of any page
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
cds_consent_v2 | This website (browser storage, not a cookie) | Remembers your cookie choice so we don’t ask on every page | Until you clear it |
_ga, _ga_* | Google Analytics | Counts visits and how the site is used, without identifying you. Only with your consent | Up to 2 years |
_GRECAPTCHA | Google reCAPTCHA | Protects our contact form from spam and abuse. Set only when you use the form; needed for it to work | Up to 6 months |
_gcl_* and other Google advertising cookies | Google Ads | Measures whether our adverts lead to enquiries. Only if you choose “Accept all” | Up to 90 days |
For more information on how Google stores and uses data, see Google’s privacy policy and how Google uses cookies.
Google Maps: the map on our Contact page is provided by Google. It only loads if you accept all cookies or press “Show the map”, and Google may then set its own cookies. See Google’s privacy policy.
ai tools/
How we use AI
We use AI tools to help with our work: writing and checking code, supporting the websites and systems we build and host, and day-to-day admin. Sometimes that means an AI tool handles personal data, such as the details in an enquiry or in a client system we support. We only use it for the purpose the data was collected for, on the same lawful basis.
- A person stays in charge. Our own team supervises the AI tools we use and checks their work before anything is sent, changed or published.
- Only the access they need. AI tools can reach only the information needed for the task in hand.
- No decisions by AI alone. We don’t make decisions about you based solely on automated processing, including AI, that have legal or similarly significant effects on you.
- Trusted providers. We only use AI providers bound by contract to keep data confidential and secure. Where a provider handles data outside the UK, we only use it where the safeguards UK GDPR requires for international transfers are in place.
If you have questions about how we use AI with your data, or want to object to it, email hello [at] cirrusdesignstudio [dot] co [dot] uk.
how we keep it/
Security and how long we keep your data
Everything we build and host is managed by our own UK team; we have never outsourced development offshore. On this website we only use third-party services where it needs them (Google, as above), and we do not use third-party plugins. The AI tools we use in our work are covered in “How we use AI” above.
We keep enquiry details only as long as we need them to answer you and, for clients, for as long as the law requires us to keep business records.
your rights/
Your rights under UK GDPR
- To see the personal data we hold about you
- To have it corrected if it is wrong
- To have it deleted
- To restrict or object to how we use it
- To receive it in a portable format
- To withdraw your consent to cookies at any time
- Not to be subject to decisions made solely by automated means, including AI, that significantly affect you
To use any of these rights, email hello [at] cirrusdesignstudio [dot] co [dot] uk. If you are unhappy with how we have handled your data, you can complain to the Information Commission (ICO).
questions/
Need more information?
If you require more information on how we manage your data, please get in touch.