Privacy notice

This notice explains what personal data Splineway (“we”, “us”) collects, why, who we share it with, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

Splineway is a small web studio based in England, and the controller of the personal data described here.

Questions about your data: hello@splineway.com.

What we collect, and why

• When you book a call. Your name, email, the time you pick and anything you write in the booking form. We use it to hold the call and follow up. Lawful basis: taking steps you asked for before a possible contract, and our legitimate interest in replying to business enquiries.
• When you email us. Your message and contact details, to reply. Lawful basis: legitimate interests.
• If you become a client. Contact, project and billing details, to deliver the work and invoice. Lawful basis: our contract with you, and legal obligations such as keeping tax records.
• When you visit the site. Our host keeps short technical logs (such as IP address, browser and page requested) to keep the site running and secure. Lawful basis: legitimate interests.
• When the booking calendar loads. Calendly may set cookies needed to show and book the calendar. See our cookie notice.

We don’t use analytics or advertising cookies, we don’t sell your data, and we don’t make automated decisions about you. We only send marketing emails if you have asked for them.

Who we share it with

• Calendly (USA) runs our booking calendar. It processes booking details for us, and is responsible for its own cookies. Calendly’s privacy notice.
• Vercel (USA) hosts this website. Vercel’s privacy notice.
• The providers we use for email, calendar, video calls and accounting, only as needed to run the business.
• Our accountant, insurers or legal advisers, and authorities such as HMRC where the law requires it.

Data sent outside the UK

Calendly and Vercel are US companies. Both are certified under the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”), which the UK recognises as giving adequate protection. If we use another provider outside the UK, we use the UK’s approved safeguards, such as the International Data Transfer Agreement.

How long we keep it

• Enquiries and bookings that don’t lead to work: up to 12 months after we last spoke.
• Client records and invoices: 6 years after the work ends, as tax law requires.
• Hosting logs: a short period set by Vercel, usually days.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to you in a portable format. You can object to us using it for our legitimate interests, and withdraw consent at any time. Email hello@splineway.com. It’s free, and we reply within one month.

Complaints

Please tell us first and we’ll try to put it right. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

Changes

If this notice changes, we’ll update it here and change the date at the top.