Privacy Policy

David Carroll & Co Design Limited (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under UK data protection law.

We are the data controller for information collected through this website. Our registered address is 114 Grove Road, London E17 9BY. Company number: 09222351.

What information we collect

We collect information in the following ways:

Contact and enquiry forms. When you use our contact form we collect your name, email address, and the content of your message. We use this information to respond to your enquiry. The lawful basis is legitimate interests — responding to a request you have made.

Newsletter sign-up. If you subscribe to our newsletter we collect your email address. We use this to send you updates about DC&CO’s work and news. The lawful basis is consent. You can unsubscribe at any time using the link in any newsletter email.

Website analytics. We use Google Analytics (via Google Site Kit) to understand how visitors use our website. This collects anonymised data including pages visited, time spent on the site, and general location (country/region). No data is linked to you personally. The lawful basis is legitimate interests — improving our website.

Cookies. Our website uses cookies. Essential cookies are required for the site to function. Analytics cookies are only set with your consent via our cookie banner. For full details see our Cookie Policy.

How long we keep your data

Enquiry form submissions are retained for up to two years. Newsletter subscriber data is retained until you unsubscribe. Analytics data is retained in accordance with Google Analytics’ standard retention settings (14 months).

Who we share your data with

We do not sell your personal data. We use the following third-party services which may process your data on our behalf:

  • Google Analytics — website analytics (Google LLC, USA). Google is certified under the EU-US Data Privacy Framework.
  • Google reCAPTCHA — spam prevention on our contact forms (Google LLC, USA).
  • Gravity Forms — contact and newsletter form processing. Form data is stored on our secure WordPress installation hosted in the UK/EEA.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data
  • Object to or restrict how we process your data
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at hello@davidcarrollandco.com.

Complaints

If you have a concern about how we handle your data you can contact the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page. This policy was last updated in March 2026.