Privacy Policy

1. Overview

This Privacy Policy explains how Alishia Shaw Creative Ltd ("we", "us", "our") collects, uses, stores, and protects personal data in connection with this website (alishawtv.uk) and the services we provide.

We are committed to processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to personal data we collect through this website only.

2. What Personal Data We Collect

We collect the following personal data when you submit the contact/enquiry form on this website:

• First and last name — to address you correctly in our response
• Email address — to reply to your enquiry
• Phone number — optional; if provided, to contact you by telephone
• Message content — your enquiry details
• Service interest — the service category you selected

We do not collect payment card details, government identification numbers, or special category data (as defined in Article 9 UK GDPR) through this website.

We do not use automated decision-making or profiling in connection with data collected through this website.

3. How We Use Your Data — Purpose and Lawful Basis

We process your personal data for the following purposes:

• Responding to your enquiry — Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR). Our legitimate interest is to respond to contact requests made by you. This interest is not overridden by your interests or fundamental rights, because you have voluntarily initiated contact.
• Analytics cookies (if accepted) — Lawful basis: Consent (Article 6(1)(a) UK GDPR). If you accept cookies via our cookie banner, we may use analytics tools to understand how visitors use our site. You may withdraw consent at any time — see Section 8.

We will not use your personal data for any purpose incompatible with the purposes stated above without first obtaining your consent.

4. Data Retention

We retain enquiry data (name, email, phone, message) for a maximum of 2 years from the date of your last contact with us, unless:

• You request earlier deletion (see Section 6 — Your Rights); or
• We are required by law to retain it for a longer period (e.g., for tax or accounting purposes).

Once the retention period expires, your data is securely deleted.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share your data only in the following circumstances:

• Google LLC (Google Fonts) — This website loads fonts from Google Fonts, a CDN operated by Google LLC (US). When your browser loads a Google Font, your IP address may be transmitted to Google's servers. Google's privacy policy applies: policies.google.com/privacy. The transfer is covered under the EU–US Data Privacy Framework (UK Extension) or Standard Contractual Clauses.
• Legal disclosure — We may disclose your data if required to do so by law, court order, or government authority.

We do not transfer your personal data to any other third country or international organisation.

6. Your Rights Under UK GDPR

As a data subject under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access — You may request a copy of the personal data we hold about you (Subject Access Request).
• Right to rectification — You may request that inaccurate or incomplete data be corrected.
• Right to erasure ("right to be forgotten") — You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing — You may request that we restrict how we use your data in certain circumstances.
• Right to data portability — Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object — You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — Where processing is based on consent (e.g., analytics cookies), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month as required by UK GDPR Article 12.

We will not charge a fee for handling requests unless they are manifestly unfounded or excessive.

7. Right to Lodge a Complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

We encourage you to contact us directly first so we have an opportunity to resolve your concern.

8. Cookies

We use cookies on this website. For full details of the cookies we use, your choices, and how to manage your preferences, please see our Cookie Policy.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your browser and this website
• Restricting access to personal data to authorised personnel only
• Secure deletion of data once the retention period expires

No method of transmission over the internet is 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

10. Children's Data

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a child, please contact us immediately at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. We recommend checking this page periodically.

Material changes that affect how we use your personal data will be communicated to you directly where we hold your contact details.