Privacy Policy

Last updated: 19 August 2026

1. Who We Are

Greenleaf Creative is a design studio based in Auchterarder, Perthshire, Scotland. We provide website design, print design, and digital marketing services to businesses across the UK.

Data Controller: Greenleaf Creative
Address: Auchterarder, Perthshire, Scotland
Email: [email protected]

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit https://greenleafcreative.co.uk or contact us directly. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect and Why

Contact Form

When you submit an enquiry via our contact form, we collect:

• Your name
• Email address
• Phone number (if provided)
• The service you are enquiring about
• The content of your message

Legal basis: Legitimate interest — to respond to your enquiry and provide the services you have asked about.
Retention: Enquiry data is kept for up to 2 years, or deleted upon your request.

Website Analytics — Google Analytics

We use Google Analytics (provided by Google LLC) to understand how visitors use our website. This helps us improve the content and usability of the site. Google Analytics collects:

• Pages visited and time spent on each page
• The website or source that referred you to our site
• Your approximate location (country and city level — not precise)
• Device type, browser, and operating system
• Interactions such as clicks and scroll depth

This data is anonymised — we cannot identify you personally from it. Google may process this data on servers outside the UK; Google's privacy policy is available at policies.google.com/privacy.

Legal basis: Legitimate interest in improving our website.
Opt out: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Behaviour Analytics — Microsoft Clarity

We use Microsoft Clarity (provided by Microsoft Corporation) to better understand how visitors interact with our website. Microsoft Clarity records:

• Mouse movements, clicks, and scrolling behaviour
• Session replays (recordings of your visit — no passwords or payment data are captured)
• Heatmaps showing which areas of pages receive the most attention
• Technical information about your device and browser

Session recordings are used solely to identify usability issues and improve the site experience. Microsoft may process this data outside the UK; Microsoft's privacy policy is available at privacy.microsoft.com.

Legal basis: Legitimate interest in understanding and improving website usability.
Opt out: You can opt out of Microsoft Clarity at clarity.microsoft.com/users/opt-out.

Cookies

Our website uses cookies — small text files stored on your device. The cookies we use fall into three categories:

You can control or disable cookies at any time through your browser settings. Note that disabling cookies may affect the functionality of the site. Useful guidance on managing cookies is available at aboutcookies.org.

Server Logs

Like all websites, our hosting server automatically records basic access information including your IP address, the date and time of your visit, and the pages you requested. This data is used solely for security monitoring and is retained for up to 30 days.

3. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only with:

• Google LLC — via Google Analytics (analytics data)
• Microsoft Corporation — via Microsoft Clarity (behaviour data)
• Our hosting provider — to operate and maintain the website
• Legal authorities — if required to do so by law

Each of these third parties acts as a data processor and is bound by their own privacy obligations.

4. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data where there is no legal reason to retain it
• Restriction — ask us to pause processing your data in certain circumstances
• Portability — receive your data in a structured, commonly used format
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

5. How Long We Keep Your Data

• Contact form enquiries: Up to 2 years from the date of your enquiry, or until you request deletion
• Analytics data (Google Analytics): Up to 26 months (Google's default retention)
• Behaviour data (Microsoft Clarity): Up to 13 months
• Server logs: Up to 30 days

6. Data Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. Our website is served over HTTPS (encrypted connection). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Links to Other Websites

Our website may contain links to third-party websites. Once you leave our site, this Privacy Policy no longer applies. We encourage you to read the privacy policies of any sites you visit.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect any changes. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

9. How to Complain

If you have a concern about how we handle your data, please contact us first at [email protected] and we will do our best to resolve it.

If you remain unsatisfied, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

10. Contact Us

For any questions about this Privacy Policy or how we handle your data:

Greenleaf Creative
Auchterarder, Perthshire, Scotland
[email protected]