This policy explains what personal data VectorMoon collects when you visit vectormoon.co.uk or send us an enquiry, which services process it, and the choices you have. We follow the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
VectorMoon is a web design studio based in Coventry, West Midlands, working with businesses across the UK. We are the controller for the personal data described here. Contact: indi@vectormoon.co.uk · 07341 555160.
2. Enquiries (contact form, email, phone)
When you use the enquiry form we receive your name, email address and message, plus anything you choose to add: phone number, current website and the package you're interested in. We use it only to reply, prepare a proposal and, if you go ahead, deliver the project. Lawful basis: steps taken at your request before entering into a contract, and our legitimate interest in answering enquiries.
The form is delivered by FormSubmit (formsubmit.co), a third-party form-to-email service. Your submission passes through FormSubmit's servers before it reaches our inbox. See FormSubmit's privacy policy. Our email is hosted by Google Workspace.
3. Cookies and similar technologies
Nothing non-essential loads until you choose. On your first visit we ask whether you accept cookies for the services below. Your choice is saved in your browser's local storage (key vm-consent-v1). That is the only thing stored before you accept. You can change your mind at any time: .
- Google Analytics 4 (Google, measurement ID G-66ZRT7NPNW), only if you accept. It records the pages you view, how you arrived (e.g. a search or a link in an email), device and browser type, approximate location (derived from your IP address, which GA4 does not store), and actions such as sending the enquiry form or tapping our phone number or email address. Cookies:
_gaand_ga_*, up to 2 years. Purpose: understanding which pages bring enquiries. - Google Ads conversion measurement, only if you accept. It runs through the same Google tag and tells us whether visits from our Google ads lead to enquiries. Cookies such as
_gcl_au(around 90 days). We use Google Consent Mode v2, so if you reject, Google tags are not loaded at all. - Tidio live chat (Tidio LLC). It is only loaded if you click “Chat” and either accepted cookies or confirm you're happy for chat to load. Tidio then processes the messages you type, any name or email you give, your IP address and device information, and stores identifiers in cookies/local storage to keep the conversation going. See Tidio's privacy policy.
Google's use of data is described at How Google uses information from sites that use its services.
4. Other services that see technical data
- Hosting: the site is hosted on GitHub Pages (GitHub, Inc.), which processes IP addresses in server logs to deliver and secure the site.
5. Sharing and international transfers
We don't sell personal data and we don't send marketing emails unless you ask us to stay in touch. The providers above act as processors or independent controllers for their own services. Some of them (Google, GitHub, Tidio, FormSubmit) may process data outside the UK. Where they do, they rely on UK adequacy regulations (including the UK–US data bridge where the provider is certified) or the UK International Data Transfer Addendum / standard contractual clauses. We may also share data with our accountant or legal advisers where the law requires it.
6. How long we keep data
- Enquiries that don't become projects: up to 24 months, then deleted.
- Client project and billing records: 6 years, for UK tax and accounting rules.
- Google Analytics data: retained for the period set in our GA4 account (maximum 14 months for event-level data).
7. Your rights
You can ask for a copy of your data, or ask us to correct it, delete it, restrict or object to its use, or move it to another provider. Where we rely on consent (analytics, ads, chat) you can withdraw it at any time in cookie settings. Email indi@vectormoon.co.uk and we'll respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office (ICO).
8. Security
The site is served over HTTPS. Access to our email and business accounts is restricted and protected with strong authentication.
9. Changes
If we change how we use data (for example, adding or removing a service above), we'll update this page and its effective date.