Privacy Policy

This Privacy Policy is in two parts. Part A covers personal data we collect from visitors to clearpathwebstudio.org and people who contact us through the website. Part B covers business contact information we obtain from publicly available sources and use for B2B outreach about our services. If you received a call or email from us and want to know where we got your details, jump to Part B.

Part A — Website visitors and enquiries

1. About this policy

This Privacy Policy explains how ClearPath Studio collects, uses, and protects your personal data when you visit clearpathwebstudio.org or contact us through the website. We are committed to handling your data transparently and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

ClearPath Studio is a UK-based sole trader operated by Demian Artan ('we', 'us', 'our'). We act as the data controller for the personal data you provide through this website.

Trading address: 66 Paul Street, London EC2A 4NA, United Kingdom.

For any privacy-related questions or to exercise your rights, contact us at Management@clearpathwebstudio.org.

3. What we collect

When you submit our contact form, we collect:

• Your name
• Your email address
• Any project details or message you choose to share

When you browse the site, we use Vercel Analytics and Vercel Speed Insights to understand aggregate site performance. These tools are cookieless and do not personally identify you. They process limited technical information including device type, browser, country, referrer, and a hashed visitor signal derived from IP and user-agent (the raw IP is not stored).

4. Lawful basis for processing

• Contact form: performance of pre-contractual steps taken at your request, and our legitimate interest in responding to enquiries.
• Analytics: our legitimate interest in understanding aggregate site performance and improving the service.

5. How we use your data

• To respond to your enquiry and discuss potential work.
• To send follow-up correspondence relating to your enquiry.
• To monitor site performance, prevent abuse, and improve the site.

We do not sell, rent, or share your personal data for marketing purposes.

6. Third-party processors

Your data is processed by the following providers acting on our behalf:

• Vercel Inc. — website hosting, analytics, and performance monitoring.
• Namecheap Private Email — email delivery for the contact form and our correspondence with you.
• Koalendar — used only when you book a discovery call via the booking link.

These processors are bound by data processing agreements and operate under appropriate transfer safeguards.

7. International transfers

Some of our processors are based outside the UK and EEA. Where personal data is transferred internationally, we rely on UK Standard Contractual Clauses, the UK Addendum, or a relevant adequacy decision to safeguard the transfer.

8. How long we keep your data

• Contact form submissions: up to 24 months from your last interaction with us, after which they are deleted.
• Analytics data:retained per Vercel Analytics' default retention period (typically up to 12 months) in aggregated form.

9. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (the 'right to be forgotten').
• Object to or restrict our processing.
• Withdraw consent (where consent was the basis for processing).
• Lodge a complaint with the Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, email us at the address above. We will respond within one calendar month.

10. Cookies

This website does not use any non-essential cookies. Vercel Analytics and Speed Insights are cookieless by design, which is why you do not see a cookie consent banner.

11. Security

We use industry-standard security measures to protect your data, including HTTPS, secure email delivery, and reputable hosting infrastructure. No internet transmission is fully secure, however, and you provide information at your own risk.

12. Changes to this policy

We may update this policy from time to time. The 'Last updated' date at the top of this page reflects the most recent revision. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or to exercise your rights: Management@clearpathwebstudio.org.

Part B — Prospect outreach

This section is provided under Article 14 of the UK GDPR, which applies when a business uses personal data it did not collect directly from the individual. If we have contacted you about our web design services, the sections below explain how we obtained your details, what we hold, what we use it for, and how to opt out.

14. Why you may have received contact from us

Your business contact details are publicly listed online — for example on Google Maps, a business directory, or your own website — and we believe our web design services may be relevant to your business. We reach out to introduce ourselves and to invite a brief conversation about your website needs.

15. What information we hold

We may hold some or all of the following:

• Your business name
• Business landline telephone number
• Generic business email address (e.g. info@, contact@)
• Business postal address
• Where applicable, the publicly listed name and role of a named business contact (e.g. company director, founder, manager)

We do not collect or process:

• Personal mobile numbers
• Personal home addresses
• Financial information
• Special category data (e.g. health, ethnicity, political views)

16. Where we obtained your information

Your information was obtained from publicly available business sources, which may include:

• Google Maps business listings published by the business itself
• Public business directories and trade-association listings
• Your own business website where contact details are published
• Companies House for limited companies

In each case the information was voluntarily made public by your business in order to be reachable by potential customers and partners.

17. Lawful basis for processing

We rely on legitimate interest under UK GDPR Article 6(1)(f). Specifically: our legitimate interest in marketing our services to UK businesses likely to benefit from a modern, high-performing website. Before processing your information we carried out a Legitimate Interest Assessment, which considers your rights and freedoms and concludes that the safeguards we have in place make the processing lawful and proportionate. A copy is available on request.

18. How we use your information

We use your business contact information solely to:

• Identify your business as a potential client.
• Contact you (and at most a small number of follow-ups) to introduce ClearPath Studio and our services.
• Maintain a record of our outreach so we do not contact you again if you ask us not to.

We do not:

• Sell, rent, or share your information with third parties for their marketing purposes.
• Use your information for any purpose other than the one stated above.
• Apply automated decision-making to your information.

19. Who processes your information

Your information may be processed by the following service providers acting on our behalf, under contract and bound by appropriate confidentiality and data-protection terms:

• A self-employed sales contractor engaged by ClearPath Studio to perform outreach on our behalf.
• Vercel Inc., Namecheap Private Email, and our CRM and dialer providers, as described in Part A above.

We do not transfer your information outside the UK except where the service provider is based abroad and operates under UK Standard Contractual Clauses or an equivalent transfer safeguard.

20. How long we keep your information

We retain prospect records for no longer than 12 months from the date of collection or the date of last meaningful contact, whichever is later. After that period, records are deleted.

If you ask us to delete your information sooner, we will do so within one calendar month and confirm by email.

If you ask us to never contact you again, we will retain a minimal record (your email or phone number plus an opt-out flag) on a 'Do Not Contact' list indefinitely, so that we can ensure we do not call or email you in future.

21. Your rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information.
• Object to processing based on legitimate interest, including a complete opt-out from future outreach.
• Restrict processing in certain circumstances.
• Receive your data in a portable format.
• Lodge a complaint with the Information Commissioner's Office at ico.org.uk.

22. How to opt out

To stop receiving any further contact from us:

• Reply to any of our emails with 'Unsubscribe' or 'Remove me' in the subject line, or
• Tell the caller during a call that you do not want to be contacted again, or
• Email Management@clearpathwebstudio.org with your number or email address and a request to be removed.

We will add your details to our Do Not Contact list within 24 hours and will not contact you again.

23. Contact

For any privacy-related question relating to outreach — including how we obtained your information, what we hold about you, or any of the rights described above: Management@clearpathwebstudio.org. We aim to respond within one working day, and in any case within one calendar month as required by UK GDPR.