Privacy Policy

This policy explains how Heartshaped ("we", "us") collects, uses and protects your personal data when you visit this website or get in touch with us. We are the data controller for the information you provide. We are based in London, United Kingdom, and we handle personal data in line with the UK GDPR and the Data Protection Act 2018.

What we collect

We only collect the information you choose to give us, and a small amount of technical data needed to run the site:

• Enquiry details — when you complete a form on this site: your name, organisation, email address, the area you're interested in, and anything you write in your message.
• Technical data — basic, mostly anonymised information such as pages visited, provided by our hosting and any analytics we use, to keep the site working and understand what's useful.

How we use it

• To respond to your enquiry and have a conversation about working together.
• To provide any resource, talk, workshop or programme you've asked about.
• To maintain, secure and improve the website.

We do not sell your data, and we don't share it with third parties for their own marketing.

Legal basis

We process enquiry data on the basis of taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us. Technical data is processed on the basis of our legitimate interest in running a secure, functional website.

Service providers

We use trusted providers to run the site and handle enquiries on our behalf — for example our website host and form provider (Netlify), and our email provider. These providers process data only on our instructions. Some may process data outside the UK; where they do, appropriate safeguards are in place.

How long we keep it

We keep enquiry data for as long as needed to respond and, where relevant, for the duration of our working relationship and a reasonable period afterwards. We delete or anonymise data when it's no longer needed.

Your rights

You have the right to access the personal data we hold about you, to ask us to correct or delete it, to object to or restrict its processing, and to data portability. To exercise any of these, contact us using the details below. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

This site uses only the cookies needed to function and, where enabled, privacy-friendly analytics. We do not use advertising or cross-site tracking cookies.

Contact

For any privacy question or request, please reach us via our contact page, or email tom@heartshaped.ai.

Note for Tom: this is a solid general policy for a UK consultancy with a contact form — have a quick read to make sure it matches how you actually handle data. Add your registered business name/address here if you want them stated.