hello@cariadreative.com

hello@cariadreative.com

Privacy Policy

Last updated 14th April 2026

Please read this Privacy Policy carefully. It explains who we are, what personal information we collect, how and why we use it, who we share it with, and what your rights are. If you have any questions, please contact us using the details at the end of this policy.

1. Who we are

We are Katrina Fouracre, trading as Cariad Creative, a sole trader business based in Wales, United Kingdom.

Email: hello@cariadcreative.com 

Website: www.cariadcreative.com 

We are the data controller of the personal information described in this policy. This means we are responsible for deciding how and why your personal data is used, and for ensuring it is handled in accordance with the law.

2. The law that applies

We are subject to the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the Data Protection Act 2018. If you are based in the European Economic Area (EEA), EU GDPR may also apply to the way we handle your personal data.

We take both frameworks seriously and apply the higher standard where there is any difference.

3. What personal information we collect

The personal information we collect depends on how you interact with us. This may include:

  • Your name and business name
  • Your email address and phone number
  • Your postal address
  • Details of the services you have enquired about or purchased
  • Communications you send to us by email, social media, or via our website
  • Technical information collected automatically when you use our website, such as your IP address and browsing behaviour (see Section 7 on Cookies)

We do not directly collect or store payment card details or bank account information. Payments are processed securely by Stripe, which has its own privacy policy and security standards. We do not have access to your full payment details.

We do not knowingly collect personal information from children. This website is intended for use by adults and business owners only.

4. How and why we use your personal information

We use your personal information for the following purposes, and rely on the legal bases set out below:

Providing our services

We use your name, contact details, and information about your project to deliver web design, development, and maintenance services to you. The legal basis for this is contract — it is necessary to perform the services you have engaged us for, or to take steps before entering into a contract.

Managing your account

If you have an account with us (for example, to access course content), we use your login details and account information to manage that access. The legal basis is contract.

Responding to enquiries

When you contact us or book a free discovery call, we use your details to respond to you. The legal basis is legitimate interests — it is in both our interests to communicate effectively before entering into any agreement.

Marketing

If you have signed up to our mailing list or ticked the relevant box when purchasing, we may send you emails about our services, offers, and useful content. The legal basis is consent. You can withdraw your consent and unsubscribe at any time (see Section 8).

Improving our website and services

We may use anonymised or aggregated data to understand how our website is used and to improve it. The legal basis is legitimate interests.

Legal compliance

We may process your data where necessary to comply with a legal obligation, for example if required to do so by a court order or regulatory authority.

5. Who we share your information with

We share your personal information only where necessary and with the following parties:

Digital Dragons IT Ltd

We share relevant client information (such as your name, email address, and domain details) with Digital Dragons IT Ltd, who provide website hosting, domain registration and renewal, and business email services on behalf of our clients. Digital Dragons acts as a data processor on our behalf and processes your data only on our instructions.

Stripe

Payment processing is handled by Stripe. When you make a payment, you are subject to Stripe’s own privacy policy. We receive confirmation of payment but do not store your card or bank details.

Acuity Scheduling

If you book a discovery call via our website, your booking details are processed by Acuity Scheduling. Please refer to their privacy policy for further information.

Legal authorities

We will share personal information with law enforcement or other authorities if required to do so by applicable law.

We will not sell, rent, or share your personal information with any other third party for their own marketing purposes.

6. How long we keep your information

We keep your personal information only for as long as necessary for the purposes for which it was collected, or as required by law. As a general guide:

  • Client records and project information: retained for 6 years from the end of the contract, in line with the Limitation Act 1980
  • Mailing list data: retained until you unsubscribe or withdraw consent
  • Enquiry and discovery call records: retained for 12 months if no contract is entered into
  • Website usage data collected via cookies: in accordance with our Cookie Policy

When personal data is no longer needed, we delete or anonymise it securely.

7. Cookies and tracking technologies

We use cookies and similar technologies on our website. For full details of what cookies we use, why, and how to control them, please see our Cookie Policy at www.cariadcreative.com/cookie-policy.

8. Marketing

We will only send you marketing emails if you have given your consent by signing up to our mailing list or ticking the relevant box when purchasing a service.

You can unsubscribe at any time by:

Please allow up to 7 working days for your request to take effect. Unsubscribing from marketing will not affect any service-related communications.

9. International data transfers

Some of the third-party services we use (such as Stripe and Acuity Scheduling) may process your data outside the UK or EEA. Where this occurs, we take steps to ensure appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or reliance on adequacy decisions.

We will not otherwise transfer your personal data outside the UK without appropriate protections in place.

10. Keeping your information secure

We take the security of your personal information seriously. We have appropriate technical and organisational measures in place to protect your data against accidental loss, unauthorised access, or misuse. Access to your personal information is limited to those with a genuine need to process it.

We have procedures in place to deal with any suspected data breach and will notify you and the Information Commissioner’s Office (ICO) where we are legally required to do so.

11. Your rights

Under UK GDPR, you have the following rights in relation to your personal information:

  • The right to be informed about how your data is used (which this policy addresses)
  • The right to access the personal information we hold about you
  • The right to have inaccurate information corrected
  • The right to have your information erased in certain circumstances
  • The right to restrict how we process your information in certain circumstances
  • The right to data portability — to receive your data in a structured, machine-readable format
  • The right to object to processing based on legitimate interests or for direct marketing
  • Rights in relation to automated decision-making and profiling

To exercise any of these rights, please contact us at hello@cariadcreative.com. We may ask you to verify your identity before processing your request. We will respond within one month in line with our legal obligations.

12. How to complain

If you have a concern about how we handle your personal information, please contact us in the first instance and we will do our best to resolve it.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the supervisory authority for data protection in the UK:

  • Website: https://ico.org.uk/concerns/
  • Telephone: 0303 123 1113

If you are based in the EEA, you may also have the right to complain to your local data protection authority.

13. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.

14. Accessibility

If you would like this Privacy Policy in an alternative format (for example, large print, audio, or braille), please contact us at hello@cariadcreative.com and we will do our best to help.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please get in touch:

Cariad Creative (Katrina Fouracre, sole trader)

Email: hello@cariadcreative.com 

Website: www.cariadcreative.com