Privacy Policy

1. Introduction

Henry Goff Studio ("I", "me", "my", "the Studio") is committed to protecting your privacy. This Privacy Policy explains how I collect, use, and protect your personal information when you visit hg.studio (the "Website").

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information I Collect

2.1 Information Collected Automatically

When you visit this Website, I may automatically collect:

• IP Address: Your Internet Protocol address, which may indicate your approximate geographic location
• Browser Information: Including browser type, version, and user agent string
• Device Information: Operating system and device type
• Access Timestamps: The date and time of each visit
• Pages Viewed: Which pages you accessed on the Website
• Referral Source: How you arrived at the Website

2.2 Information You Provide

If you contact me through the Website, book a call, or subscribe to communications, I may collect:

• Your name
• Your email address
• Any other information you choose to provide in your message
• Booking details (date, time, and meeting preferences)

2.3 Analytics

This Website uses Google Analytics 4 (GA4) to understand how visitors use the site. GA4 only loads after you provide consent via the cookie banner.

When consent is given, GA4 collects:

• Page views and navigation paths
• Session duration and engagement metrics
• Device and browser information
• IP address (anonymised by default in GA4)
• Approximate geographic location (country/city level)

Analytics data is retained for 14 months in Google Analytics. I do not share personally identifiable information with Google for marketing purposes.

For more information, see Google's Privacy Policy.

2.4 Third-Party Services

The following third-party services may process your personal data on my behalf:

All processors are required to comply with GDPR and have appropriate data processing agreements in place.

3. How I Use Your Information

I use the information collected for the following purposes:

4. Data Sharing

I do not sell, rent, or trade your personal data to any third parties.

I may share your data with:

• Analytics providers: Google (for website analytics, with your consent)
• Email delivery services: Resend and Web3Forms (for processing contact form submissions)
• Appointment scheduling: Calendly (for booking discovery calls)
• Email marketing: MailerLite (for sending communications you have opted into)
• Customer relationship management: CRM provider (for managing client relationships)
• Hosting providers: Who process data on my behalf to deliver the Website
• Professional advisers: If required for legal or accounting purposes
• Legal authorities: If required by law or to protect my rights

All processors are required to comply with GDPR and have appropriate data processing agreements in place.

5. Data Retention

I retain personal data only for as long as necessary:

• Analytics data: Up to 14 months (Google Analytics retention setting)
• Contact enquiries: Retained for up to 3 years or until the purpose is fulfilled
• Email marketing data: Retained until you unsubscribe or request deletion
• Booking data: Retained by Calendly per their retention policy
• Legal records: Retained as required by applicable law

6. International Transfers

Your data may be processed in countries outside the United Kingdom. The following services process data in the locations specified:

• Google LLC (United States) — covered by the UK Extension to the EU-US Data Privacy Framework
• Calendly (United States) — Standard Contractual Clauses apply
• Resend (United States) — Standard Contractual Clauses apply
• MailerLite (Lithuania, EU) — no international transfer required

Where data is transferred outside the UK, I ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

7. Cookies

Essential cookies are used without consent as they are necessary for the Website to function. Analytics cookies are only set after you provide consent via our cookie banner. You can change your preferences at any time by clicking "Cookie Settings" in the footer.

8. Your Rights

Under the UK GDPR, you have the following rights:

8.1 Right of Access

You can request a copy of the personal data I hold about you.

8.2 Right to Rectification

You can request correction of any inaccurate personal data.

8.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

8.4 Right to Restriction of Processing

You can request that I restrict the processing of your personal data.

8.5 Right to Data Portability

You can request your data in a structured, commonly used format.

8.6 Right to Object

You can object to processing based on legitimate interests.

8.7 Right to Withdraw Consent

You can withdraw consent for analytics cookies at any time by clicking "Cookie Settings" in the footer. You can withdraw consent for marketing emails by clicking the unsubscribe link in any email.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact me at:

Email: hello@hg.studio

I will respond within one month and may ask you to verify your identity.

8.9 Right to Complain

If you are unhappy with how I have handled your data, you can lodge a complaint with the Information Commissioner's Office (ICO):

9. Security

I implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure hosting infrastructure
• Regular review of security practices
• Limited access to personal data

10. Third-Party Links

This Website may contain links to external sites. I am not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.

11. Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

12. Contact

If you have any questions about this Privacy Policy or how your data is processed, please contact: