Privacy, in plain words.

We keep this simple: we only collect what we need to reply to you, send what you've asked for and look after your project. We never sell your details, and we don't track you around the web.

Last updated: 10 November 2026.

Who we are

This website is run by Stay Creative Design ("Stay Creative", "we", "us"). We're the controller of the personal details described here, which means we decide how they're used and we're responsible for looking after them under UK data protection law (the UK GDPR and the Data Protection Act 2018).

The easiest way to reach us is by email. If you have any questions about your details, email hello@staycreative.design.

What we collect

When you say hello

The contact form asks for your name, your email address, what your message is about and the message itself. We receive it as an email in our inbox, so we can read it and reply.

When you join the newsletter

The newsletter sign-up only asks for your email address. It reaches us the same way, as an email, and we add you to our mailing list.

When you work with us

If you become a client, we'll also keep the details we need to work together: contact details, project notes and files, the emails we send each other, and billing details such as invoices and payment records. We never ask for or store card details on this website.

When you visit the site

Like any website, the servers that deliver these pages see technical details such as your IP address, browser type and the page you asked for. Our hosting provider uses these to deliver the site, keep it secure and fix problems. If you accept analytics or marketing cookies in our cookie banner, Google tools loaded through Google Tag Manager may also collect information about how you use the site, as described on our cookies page. If you decline them, they don't run. We don't build a profile of you.

How we use it, and why we're allowed to

Data protection law asks us to have a lawful basis for each use. In plain words:

• Replying to you when you get in touch. Our basis is legitimate interests: you've asked us something, and replying is what you'd expect. If you're asking about a project, it's also a step towards a contract you've asked about.
• Sending the newsletter you signed up for. Our basis is your consent, which you can take back at any time.
• Working on your project, including your monthly update if you're a Growth care client. Our basis is our contract with you.
• Keeping business and tax records such as invoices. Our basis is a legal obligation.
• Keeping the site safe and working, for example stopping spam on the forms. Our basis is legitimate interests.

We'll only email you about things you've asked for or that relate to work we're doing together.

Who else sees it

A few trusted services help us run the site and the studio. They only use your details to provide their service to us, under contracts that require them to keep them safe:

• Cloudflare hosts the website and runs the forms.
• Resend delivers the messages from the contact and newsletter forms to our inbox, and sends the newsletter.
• Sanity stores the site's blog posts and case studies, and serves some images. Your browser fetches those images from Sanity's servers, which see your IP address in the process.
• Sage handles invoices and accounts for clients.

We may also share details with professional advisers such as our accountant, or where the law requires it. We never sell your details or share them for marketing.

Sending details outside the UK

Some of these services are based in, or use servers in, the United States or the European Economic Area. Where your details leave the UK, we rely on the protections UK law allows, such as the UK Extension to the EU–US Data Privacy Framework or the ICO's International Data Transfer Addendum, so they're looked after to the same standard.

How long we keep it

• Messages that don't lead to a project: up to 12 months, then deleted.
• Newsletter sign-ups: until you unsubscribe.
• Client records: for as long as we're working together, then 6 years after our last invoice, because UK law asks us to keep financial records that long.
• Hosting and security logs: kept by our hosting provider for a short time, then deleted automatically.

Your rights

You have the right to:

• ask for a copy of the details we hold about you
• ask us to correct anything that's wrong
• ask us to delete your details
• ask us to limit how we use them, or object to us using them
• ask for your details in a format you can take elsewhere
• take back your consent at any time, for example by unsubscribing from the newsletter

Just email hello@staycreative.design. It's free, and we'll reply within one month.

Complaints

If you're unhappy with how we've handled your details, please tell us first and we'll do our best to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this page

If we change how we use your details, we'll update this page and the date at the top. If it's a big change, and we have your email address, we'll let you know.