1. Who we are
This website is operated by Designs by K&K, a creative design studio based in Liverpool, United Kingdom. For the purposes of UK data protection law, Designs by K&K is the data controller — meaning we decide how and why your personal information is processed.
You can contact us at:
Email: enquiries@designsbykk.co.uk
Website: designsbykk.co.uk
Based in: Liverpool, United Kingdom
2. Data we collect
We only collect personal data that you actively provide to us. We do not use tracking pixels, behavioural advertising or third-party analytics that collect personal data without your knowledge.
Contact and enquiry form
When you submit the contact form on this website, we collect:
- First name and last name
- Email address
- Phone number (optional, if provided)
- Enquiry type, budget indication and services of interest
- The message content of your enquiry
- Any file you choose to attach (PDF, image, ZIP etc.)
- A record that you provided consent for us to contact you
Newsletter subscription
When you subscribe to Studio Notes via the newsletter form, we collect:
- Your email address
- The date and time of your subscription
Server logs
Our web hosting provider (WHUK) may automatically record standard server log data when you visit the site, including your IP address, browser type, pages visited and date/time of access. This data is held by the hosting provider for security and operational purposes and is not used by us to identify individuals.
3. How we use your information
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your project enquiry or quote request | Name, email, phone, message, attachment | Legitimate interests / contract |
| Managing ongoing project communication | Name, email, phone, project details | Contract performance |
| Sending the Studio Notes newsletter | Email address | Consent |
| Keeping records of completed projects | Name, email, project files | Legitimate interests |
| Complying with legal obligations | As required by law | Legal obligation |
We will never use your data for purposes incompatible with those listed above, send unsolicited marketing unrelated to your enquiry, or share it with third parties for their own marketing purposes.
4. Legal basis for processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:
- Legitimate interests (Article 6(1)(f)) — responding to enquiries you have initiated, keeping business records and maintaining our website securely. We have assessed that our legitimate interests do not override your rights and freedoms.
- Contract performance (Article 6(1)(b)) — processing data necessary to fulfil a project agreement you have entered into with us.
- Consent (Article 6(1)(a)) — sending the Studio Notes newsletter. You may withdraw this consent at any time (see Section 8).
- Legal obligation (Article 6(1)(c)) — where we are required by law to retain or disclose information.
5. How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Enquiry emails (no project) | 12 months | In case the enquiry is revisited |
| Project correspondence and files | 3 years after project completion | Business records, dispute resolution |
| Invoice and payment records | 6 years | HMRC tax record requirements |
| Newsletter subscriber email | Until you unsubscribe | Ongoing consent-based communication |
| File attachments (contact form) | Deleted after project completion or 30 days if no project proceeds | Minimum necessary retention |
When data is no longer needed for its original purpose and there is no legal obligation to retain it, we securely delete or anonymise it.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at enquiries@designsbykk.co.uk. We will respond within one calendar month.
Right of access
You can request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification
You can ask us to correct any inaccurate or incomplete data we hold about you.
Right to erasure
You can ask us to delete your personal data where there is no compelling reason for us to continue holding it.
Right to restrict processing
You can ask us to pause processing of your data in certain circumstances, for example while a complaint is investigated.
Right to data portability
Where processing is based on consent or contract, you can request your data in a structured, machine-readable format.
Right to object
You can object to processing based on legitimate interests. We will stop unless we have compelling grounds that override your interests.
Withdrawing consent
Where we rely on consent to process your data (for example, for the newsletter), you can withdraw that consent at any time by emailing enquiries@designsbykk.co.uk with the subject line "Unsubscribe" or "Withdraw consent". Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.
Right to complain
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority:
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO — please contact us first.
9. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include:
- HTTPS encryption on all pages of this website
- Secure email via Microsoft 365 with standard encryption in transit
- Access to enquiry data restricted to the studio team only
- File attachments handled by server-side PHP and not stored permanently on the server
- Newsletter subscriber data held in a password-protected database on WHUK hosting
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO in accordance with our obligations under UK GDPR.
10. Children's data
This website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. Our contact and newsletter forms are intended for use by adults or by parents and guardians acting on behalf of their families.
If you believe we have inadvertently collected data from a child under 13, please contact us immediately at enquiries@designsbykk.co.uk and we will delete it promptly.
Note: while some of our products (such as children's colouring books) are designed for children, those products are purchased or enquired about by parents, guardians or adult creators — not by children directly.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make significant changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this page periodically. Continued use of the website after any changes constitutes acceptance of the updated policy. If changes materially affect how we use data you have already provided (for example, newsletter subscribers), we will notify you directly where possible.
12. Contact us
For any questions, requests or concerns relating to this Privacy Policy or your personal data, please contact us:
Website: designsbykk.co.uk/contact
Based in Liverpool, United Kingdom
We aim to respond to all data-related requests within 30 calendar days.
If you wish to exercise a data subject right (access, erasure, correction etc.), please email with the subject line "Data Request" and include your full name and the email address you used when contacting us, so we can locate your records efficiently.