Privacy Policy

1. Who we are

Moffat Studio ("we", "us", "our") is a design and software studio based in the United Kingdom. We build and run websites, web apps and the software behind them for our clients. For the purposes of UK data protection law, we are the "data controller" of the personal information described in this policy.

If you have any questions about this policy or how we handle your data, contact us at hello@moffatstudio.co.uk.

2. Information we collect

We only collect what we need to run our business and deliver our work. Depending on how you interact with us, that may include:

• Contact details — your name, email address, phone number and company name, when you fill in an enquiry form or email us.
• Project information — anything you choose to share about your business, brief or requirements when working with us.
• Correspondence — the content of messages you send us and our replies.
• Technical data — basic information your browser sends when you visit our site, such as approximate location, device and browser type, and pages viewed.

We do not knowingly collect sensitive personal data, and we ask that you do not send it to us through our forms.

3. How we use your information

We use your information to:

• Respond to your enquiry and provide a quote;
• Deliver, manage and support the services you have engaged us for;
• Send you project updates, invoices and service-related messages;
• Improve our website and understand how it is used;
• Meet our legal, accounting and regulatory obligations.

We will never sell your personal information, and we do not send marketing emails unless you have asked us to.

4. Our legal bases

Under UK GDPR we rely on the following legal bases to process your data:

• Contract — where processing is necessary to provide a service you have requested or to take steps before entering a contract.
• Legitimate interests — to respond to enquiries, run and improve our business, and keep our site secure, provided your rights do not override those interests.
• Legal obligation — where we must keep records for tax, accounting or other legal reasons.
• Consent — where you have given us permission, for example for non-essential cookies. You can withdraw consent at any time.

5. Cookies & analytics

Our site uses a small number of cookies and similar technologies. Essential cookies are needed for the site to function. If we use analytics, it is only to understand aggregate usage — such as which pages are most visited — and never to identify you personally.

You can control or delete cookies through your browser settings. Blocking essential cookies may affect how parts of the site work.

6. How your enquiry is sent

When you submit a contact or enquiry form, it is delivered to us through our own self-hosted form relay on moffatstudio.co.uk — not a third-party form service. The message is emailed to the relevant Moffat Studio mailbox and is not shared with anyone outside our team.

7. Sharing & third parties

We keep your data within our team wherever possible. Where we rely on trusted providers to run our business, they only process data on our instructions and under appropriate agreements. These may include:

• Our hosting and infrastructure provider;
• Our email provider, for correspondence and enquiry delivery;
• Accounting and payment providers, for invoicing.

We may also disclose information where required by law, or to protect our rights, property or safety.

8. How long we keep it

We keep personal information only for as long as we need it: for the duration of our working relationship, plus any period required to meet legal, tax or accounting obligations. When it is no longer needed, we securely delete or anonymise it.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Ask us to delete your data, where there is no legal reason to keep it;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent where we rely on it.

To exercise any of these rights, email hello@moffatstudio.co.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to resolve any concern first.

10. Security

We take reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, but we work hard to safeguard your data and to keep the systems we run properly maintained.

11. International transfers

Where any of our providers process data outside the UK, we take steps to ensure it is protected by an adequate level of safeguards, such as an adequacy decision or standard contractual clauses.

12. Children

Our services are aimed at businesses, and our site is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be made clear on this page.

14. Contact us

Questions, requests or concerns about your privacy are always welcome. Reach us at hello@moffatstudio.co.uk and we will respond promptly.