Privacy policy
Last updated 14 October 2026. TODO: items highlighted like this are placeholders to be completed, and the whole policy should be reviewed by a qualified adviser before launch.
Who we are
The data controller is [LEGAL NAME / TRADING AS], trading as Foliobrook, of [REGISTERED OR CORRESPONDENCE ADDRESS]. ICO registration: [ICO REGISTRATION NUMBER]. Contact: hello@foliobrook.com.
What we collect
When you use the “Book your free website preview” form we collect: your name, email address, phone/WhatsApp number (optional), your current website address or Instagram handle (optional), the type of photography you do, and your consent choice. We also receive the technical data your browser sends (IP address and user agent) when you submit the form.
If you go ahead with a preview, you choose a few photos to send us. We use them only to build your mock-up and show it to you, never in our own marketing without your separate written permission, and we delete them if you don’t become a client. TODO: confirm the deletion period for preview photos (suggested: 60 days after the walk-through call).
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your request, and building and showing you your free website preview | Your consent (the tick box on the form), and steps at your request before a contract |
| Keeping a record of enquiries; preventing spam and abuse | Legitimate interests (running and securing the business) |
| Measuring advertising results with Meta (pixel and server-side events) | Your consent via the cookie banner. Nothing is sent to Meta unless you accept. |
You can withdraw consent at any time, which won’t affect processing already carried out.
Who we share it with (processors)
- Resend (email delivery): delivers your enquiry to us by email.
- Vercel (hosting and serverless functions): hosts this site and processes the form submission.
- Meta Platforms (only if you accept advertising cookies): receives pixel events and, for form submissions, a server-side “Lead” event containing hashed email/phone, your IP address and browser details, used to measure and improve ads. Meta may act as an independent controller for its own purposes; see Meta’s privacy policy.
Some of these providers are based outside the UK, notably in the USA. Transfers rely on the UK–US data bridge or the UK International Data Transfer Addendum / standard contractual clauses. TODO: confirm with each provider’s current terms.
How long we keep it
Enquiries that don’t lead to a project are deleted after 12 months. If we work together, your details are kept for the length of the contract plus 6 years for accounting and legal purposes. TODO: confirm retention periods.
Your rights
You can ask to access, correct, erase, restrict or receive a copy of your data, object to processing, and withdraw consent. Contact us using the details above. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Cookies and similar technologies
We set nothing that isn’t strictly necessary until you choose. Use “Cookie settings” in the footer to change your choice at any time.
| Name | Provider | Purpose | Duration | Consent needed |
|---|---|---|---|---|
consent (local storage) | This site | Remembers your cookie choice | Until cleared | No (strictly necessary) |
_fbp | Meta Pixel | Identifies browsers to measure ad performance | Up to 90 days | Yes |
_fbc | Meta Pixel | Records that you arrived from a Meta ad | Up to 90 days | Yes |
Changes
We’ll update this page if our practices change and show the date at the top.