Privacy Policy

Last updated: 18 July 2026

Fern & Whistle Studio ("Fern & Whistle", "we", "us", "our") is a design studio based in Cheltenham, Gloucestershire, United Kingdom, trading as a sole trader. This policy explains how we collect, use, and protect personal data when you visit fernandwhistle.co.uk (the "Website") or otherwise get in touch with us.

We are the "data controller" for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where visitors are based in the European Economic Area (EEA), the EU GDPR also applies to us in respect of that processing.

If you have any questions about this policy or how we handle your data, contact us at:

Email:sarah@fernandwhistlestudio.co

1. What Personal Data We Collect

We collect personal data in the following ways:

a) When you contact us through our enquiry form Name, email address, phone number (if provided), and any details you choose to include in your message about your business or project.

b) When you subscribe to our mailing list Name and email address, collected via Kit when you sign up.

c) Automatically, when you browse the Website We use Google Analytics to understand how visitors use the Website. This may collect your IP address (anonymised where possible), browser and device type, pages visited, time spent on the Website, and referring website. This is collected via cookies — see Section 6 below.

We do not knowingly collect payment or financial information through the Website.

2. How We Use Your Data, and Our Legal Basis

Purpose, what data is collected, for what legal basis:

  • Responding to your enquiry and discussing a potential project

    • Name, email, phone, message content

    • Legitimate interest (to respond to enquiries) / steps taken at your request prior to a contract

  • Sending you marketing emails (e.g. news, offers, content)

    • Name, email

    • Consent — you can withdraw this at any time

  • Understanding and improving how the Website performs

    • Analytics data (via Google Analytics)

    • Consent (via cookie banner)

  • Keeping records for accounting, tax, or legal purposes if you become a client

    • Name, contact details, project/invoice details

    • Legal obligation / legitimate interest

We will never sell your personal data to third parties.

3. Who We Share Your Data With

We use a small number of trusted third-party service providers ("processors") to help run the Website and our business. These include:

  • Squarespace — our website hosting and enquiry form provider

  • Google Analytics — website usage analytics

  • Kit — email marketing

These providers only process your data on our instructions and are bound by their own data protection obligations. We do not share your data with any other third party unless required to by law.

4. International Data Transfers

Some of our service providers (including Google and Kit) may store or process data outside the UK and EEA, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the provider's participation in an approved data protection framework (e.g. the UK Extension to the EU–US Data Privacy Framework, where applicable).

5. How Long We Keep Your Data

  • Enquiries that don't become a project: We retain your enquiry details for up to 12 months, in case you get back in touch.

  • Client project records: Retained for as long as necessary to fulfil the project and meet our legal and accounting obligations.

  • Mailing list: Retained until you unsubscribe or request deletion.

  • Analytics data: Retained according to Google Analytics' standard retention settings.

6. Cookies

Our Website uses cookies — small text files stored on your device — to help it function and to understand how it's used. We use:

  • Essential cookies, needed for the Website to work correctly (these can't be switched off).

  • Analytics cookies (Google Analytics), which help us understand visitor behaviour. These are only set with your consent via our cookie banner.

You can manage or withdraw cookie consent at any time through the cookie banner or your browser settings. Blocking essential cookies may affect how the Website functions.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate or incomplete data

  • Request erasure of your data ("right to be forgotten")

  • Restrict how we use your data

  • Object to processing based on legitimate interest or for direct marketing

  • Data portability — receive your data in a portable format

  • Withdraw consent at any time, where processing is based on consent (this won't affect processing carried out before you withdrew it)

To exercise any of these rights, email us at sarah@fernandwhistlestudio.co  We will respond within one month.

8. Children's Data

Our Website and services are aimed at business owners and are not directed at children. We do not knowingly collect personal data from anyone under 18.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will show when it was last revised. We encourage you to review it periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Fern & Whistle Studio Email: sarah@fernandwhistlestudio.co