Who we are
Spinta is an independent digital studio run as a sole trader business in Essex, United Kingdom (“Spinta”, “we”, “us”). We design and build websites, apps and brands. We’re the controller of the personal data described here, which means we decide how and why it’s used.
Questions about this notice or your data: email hello@spinta.co.uk. We’ll reply within one month, and usually much sooner.
The short version
- There’s no analytics, advertising or tracking on this website, and it doesn’t put cookies on your device (see Cookies).
- If you send an enquiry or email us, we use what you send to reply and, if we work together, to do the work.
- We never sell personal data. We only share it with the services that help us run the studio, listed below.
What we collect, and why
When you send an enquiry
Our enquiry forms ask for your name and email address, and you can add a phone number, a rough budget, what your project needs and a message. We also note which page you sent it from. We use this to reply, to give you a price and a date, and to keep a record of what we discussed.
Our lawful basis is our legitimate interest in replying to people who get in touch and, if you want to go ahead, taking the steps needed to agree a contract with you.
When you email or call us
The same goes for anything you send us directly: we use it to reply, and keep a record of the conversation.
If you become a client
We keep what we need to deliver and support the work: contact details, briefs, content and files, your feedback (including comments left on our private review pages), and invoices and payment records. We don’t take card payments through this website.
Our lawful bases are performing our contract with you, and our legal obligations, such as keeping accounting records for HMRC.
If we contact you about our services
We sometimes look for local businesses that might want a new website or app, using public sources such as business websites, map listings and directories. We keep the business details we find (name, website, public contact details and our notes) so we can tailor what we send and never contact anyone twice. If you’re a sole trader or a partner, some of that is personal data.
Our lawful basis is our legitimate interest in finding new clients. You can object at any time: tell us, and we’ll stop and keep only what’s needed to make sure we don’t contact you again.
When you browse this site
Like any website, our host receives technical information when a page loads, such as your IP address, your browser and the page you asked for, and keeps it in short-lived logs to run and protect the site. The site’s fonts come from Google Fonts, so your browser also connects to Google, which receives your IP address. We don’t use any of this to identify you.
Our lawful basis is our legitimate interest in running a secure website that works.
Who we share it with
We don’t sell or rent personal data. We use a small number of service providers who handle it on our behalf, under contract, and only as far as they need to:
- Vercel hosts this website and the form that receives enquiries.
- Resend delivers enquiries from the website to our inbox.
- Our email provider stores the emails we send and receive.
- Supabase hosts our private studio tools: client projects, review pages and our list of businesses we may contact.
- Google Fonts serves the fonts this site uses.
We may also share data with professional advisers, such as an accountant, or where the law requires us to.
Data outside the UK
Some of these providers are based in, or handle data in, the United States or elsewhere outside the UK. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as the UK–US Data Bridge or the UK’s International Data Transfer Addendum.
How long we keep it
- Enquiries that don’t go further: up to two years after we last spoke, then deleted.
- Client records: for as long as we work together, and invoices and accounting records for six years after the end of the tax year they relate to, as HMRC requires.
- Businesses we’ve researched: up to 12 months if we don’t hear back. If you ask us not to contact you, we keep only your business name and contact details on a do-not-contact list.
- Website logs: kept by our host for a short period, then deleted automatically.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that’s wrong or incomplete
- delete your data
- restrict how we use it, or object to us using it (including to contact you about our services, which we’ll always stop)
- give you your data in a portable format, where that applies
To use any of these rights, email hello@spinta.co.uk. It’s free, and we’ll respond within one month. We may need to check it’s you first.
If you’re unhappy with how we’ve handled your data, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk or on 0303 123 1113.
Keeping it safe
We keep personal data in a small number of established services, and only the people who need it for your project can see it. The site is served over an encrypted connection, and the enquiry form checks every submission and limits how often it can be used.
Children
This site and our services are for businesses and adults. We don’t knowingly collect personal data from children.
Automated decisions
We don’t make decisions about you by automated means, and we don’t profile visitors.
Changes to this notice
If we change how we use personal data, we’ll update this page and the date at the top. If a change is significant and we have your email address, we’ll tell you.
Questions? Email hello@spinta.co.uk.