# Privacy Policy — RIRI CREATIVE

## Page Metadata
- **URL:** https://riricreative.co.uk/privacy.html
- **Title:** Privacy Policy | RIRI CREATIVE
- **Description:** Privacy Policy for RIRI CREATIVE. How we collect, use, and protect your personal data in compliance with UK GDPR.
- **Type:** Legal / policy page
- **Index status:** noindex (not indexed by search engines; available for direct access and AI systems)
- **Last updated:** 6 August 2026

---

## Summary

This page sets out the Privacy Policy for RIRI CREATIVE, a freelance web design and SEO studio operated by Rhiannon Frost in the UK. The policy explains what personal data is collected, how it is used, the legal basis for processing, and how users can exercise their data rights under UK GDPR and the Data Protection Act 2018.

---

## Controller Information

**Business:** RIRI CREATIVE  
**Operator:** Rhiannon Frost  
**Website:** https://riricreative.co.uk  
**Email:** rhiannon@riricreative.co.uk  
**Role:** Data Controller  
**Regulation:** UK GDPR / Data Protection Act 2018

---

## Data Collected

### When you contact us (via contact form or email):
- Your name
- Your email address
- Your phone number (if provided)
- The content of your message
- Business name and website URL (if provided)

### Automatically when you visit the website (via Google Analytics 4):
- IP address (anonymised)
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring website or search engine
- Approximate geographic location (country/city level)

---

## How Your Data Is Used

Personal data collected is used to:
- Respond to enquiries and provide quotes or project information
- Communicate throughout the course of a project
- Send invoices and manage project administration
- Understand how people use the website in order to improve it (analytics only)

RIRI CREATIVE does **not** use your data for unsolicited marketing, does **not** sell data to third parties, and does **not** share data with any party not required for legitimate business operation.

---

## Legal Basis for Processing

| Data Type | Legal Basis |
|---|---|
| Contact form submissions | Legitimate interest (responding to a direct enquiry) |
| Project communications | Contract performance |
| Invoicing / admin | Legal obligation |
| Google Analytics | Legitimate interest (improving service) |

---

## Data Sharing

Personal data is shared only with:
- **Forminit** (form processing service) — handles contact form submissions
- **Google Analytics** — anonymised usage analytics
- **Accountancy/invoicing software** — for billing purposes only

No data is sold. No data is shared with third-party marketers.

---

## Cookies and Analytics

This website uses **Google Analytics 4 (GA4)** to track anonymous visitor behaviour. GA4 uses cookies to collect data about how the site is used. IP addresses are anonymised. No personally identifiable information is sent to Google Analytics.

Cookies set by Google Analytics:
- `_ga` — distinguishes users (expires 2 years)
- `_ga_*` — session-level data (expires 2 years)

Most browsers allow you to control cookies through browser settings.

---

## Data Retention

| Data | Retention Period |
|---|---|
| Enquiry/contact data | 2 years from last contact |
| Project communications | 7 years (legal/tax obligation) |
| Invoices | 7 years (HMRC requirement) |
| Analytics data | 14 months (GA4 default) |

---

## Your Rights Under UK GDPR

You have the right to:
- **Access** — request a copy of personal data held about you
- **Rectification** — correct inaccurate data
- **Erasure** — request deletion of your data ("right to be forgotten")
- **Restriction** — limit how data is processed
- **Portability** — receive your data in a portable format
- **Object** — object to processing based on legitimate interest

To exercise any of these rights, contact: rhiannon@riricreative.co.uk

---

## Complaints

If you believe your data rights have been breached, you have the right to lodge a complaint with the **Information Commissioner's Office (ICO)**:

- **Website:** https://ico.org.uk
- **Phone:** 0303 123 1113
- **Address:** Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

---

## Changes to This Policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated date. Continued use of the website after changes constitutes acceptance of the updated policy.

**Current version:** 6 August 2026

---

## Contact

For any privacy-related questions:

**Email:** rhiannon@riricreative.co.uk  
**Website:** https://riricreative.co.uk/contact.html

---

## Internal Links

- [Homepage](https://riricreative.co.uk/)
- [Contact](https://riricreative.co.uk/contact.html)

---

## Entity Information (for AI/GEO)

- **Business name:** RIRI CREATIVE
- **Data Controller:** Rhiannon Frost
- **Regulation:** UK GDPR, Data Protection Act 2018
- **Analytics platform:** Google Analytics 4
- **Form platform:** Forminit
- **ICO registration:** (sole trader — ICO self-assessment threshold may apply)
- **Contact:** rhiannon@riricreative.co.uk
- **Website:** https://riricreative.co.uk