Last updated: 24 July 2026
South Quay Design (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how your data is handled, you can contact us at: contact@southquaydesign.com
Who we are
South Quay Design is the trading name of an individual operating as a sole trader based in the UK, and is the data controller responsible for your personal data collected through this website.
Our website address is: https://southquaydesign.com.
What Personal Data We Collect
Logging in to your account
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you request a password reset, your IP address will be included in the reset email.
Using our contact form
- Name
- Email address
- Any message content and information you choose to include
Making a purchase through our store
- Name
- Billing and delivery address (where applicable, though our products are digital downloads)
- Email address
- Order history and details of products purchased
- Payment information — note: we do not directly store your card or payment details. Payments are processed securely by our third-party payment provider, Stripe. Please refer to their privacy policy for details on how they handle your payment data.
Browsing our website
- We use Google Search Console to understand how our site appears in Google Search results (e.g. which search terms bring visitors to the site, indexing status). Search Console does not track or identify individual visitors and does not use tracking cookies on your browser.
- Our website may use strictly necessary cookies (for example, to remember items in your shopping cart or maintain your session while browsing). These are essential for the website to function and do not require separate consent under UK cookie law (PECR), as they are strictly necessary for a service you have requested.
How we use your data
We use your personal data to:
- Respond to enquiries submitted via our contact form
- Process and fulfil your orders, including providing you with digital downloads
- Communicate with you about your order (e.g. confirmations, receipts, support)
- Maintain records for accounting, tax, and legal compliance purposes
- Monitor and improve the performance of our website in search results (via Google Search Console)
We do not use your data for automated decision-making or profiling, and we do not sell your personal data to third parties.
Who We Share Your Data With
We share limited personal data with the following third parties, only as necessary to operate our store:
- Payment processor (Stripe) — to securely process payments
- OVH — our website hosting provider, based in Gravelines, France, which stores the data submitted through our website and store
- WooCommerce/WordPress — the e-commerce platform used to run our store, which processes order data as part of enabling store functionality
We do not share your data with third parties for their own marketing purposes.
Where Your Data Is Stored
Our website is hosted with OVH, on servers located in Gravelines, France. This means your data is transferred to and stored within the European Economic Area (EEA).
The UK government has formally recognised the EU/EEA as providing an adequate level of data protection under UK GDPR (“adequacy regulations”). This means your data can be transferred to and stored in France without the need for additional legal safeguards. If we use any service in the future that stores or processes data outside the UK or EEA, we will ensure appropriate safeguards are in place and update this policy accordingly.
How Long We Keep Your Data
- Order and transaction data is kept for as long as required by UK tax and accounting law (currently up to 6 years).
- Contact form submissions are kept only as long as necessary to respond to and resolve your enquiry, after which they are deleted, unless a longer retention period is required for legal reasons.
Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases to process your data:
- Contract — to process your order and provide the digital products you have purchased
- Legitimate interests — to respond to enquiries and maintain the functioning and security of our website
- Legal obligation — to keep financial records as required by UK tax law
- Consent — where applicable, such as if you opt in to future marketing communications (we will only do this with your clear, separate consent)
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”), where applicable
- Restrict or object to processing of your data in certain circumstances
- Data portability — request a copy of your data in a machine-readable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at contact@southquaydesign.com. We will respond within one month, as required by law.
Contact
If you have any questions about this privacy policy or how your data is handled, please use our contact form or email us: contact@southquaydesign.com