Privacy Policy

This privacy notice for Charlie Cooper trading as Orange Moon Design ('Company', 'we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your information when you use our services ('Services'), such as when you visit our website at https://orangemoon.design/ or engage with us in sales, marketing, or web development projects.

ICO Registration Number: ZC138489

Reading this privacy notice will help you understand your privacy rights and choices under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions or concerns, please contact us at charlie@orangemoon.design.

Table of Contents

1. Our Role as Controller vs. Processor

Under the UK GDPR, we act in two different capacities depending on how you interact with us:

• As a Data Controller: When you visit our website, contact us for a quote, or become a direct client of Orange Moon Design, we act as the Data Controller. This means we decide how and why your personal information is processed. This privacy policy primarily covers our activities as a Data Controller.
• As a Data Processor: When providing web design, development, and maintenance services, we act as a Data Processor on behalf of our clients (who act as the Data Controllers). In the course of building or maintaining WordPress sites and WooCommerce stores, we may temporarily access, migrate, or manage databases containing personal data belonging to our clients' customers (such as order histories, names, and user accounts). We only process this data according to our clients' strict written instructions, and we never use client data for our own purposes. Detailed processing terms are outlined in our individual client contracts.

2. What information do we collect?

Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our Services, or when you contact us. This may include your name, phone number, email address, and business details. We do not process sensitive personal information.

Information automatically collected
We automatically collect certain information when you visit, use, or navigate our Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, referring URLs, and location data. This is primarily needed to maintain the security and operation of our website, and for our internal analytics.

3. What legal bases do we rely on?

The UK GDPR requires us to explain the valid legal bases we rely on in order to process your personal information:

• Consent: We may process your information if you have given us permission to use it for a specific purpose (e.g., accepting tracking cookies). You can withdraw your consent at any time.
• Performance of a Contract: We will process your personal data when it is necessary to fulfill our contractual obligations to you, such as building your website.
• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests, provided those interests do not outweigh your fundamental rights and freedoms.
• Legal Obligations: We may process your information where we believe it is necessary for compliance with our legal obligations.

4. When and with whom do we share your personal information?

We do not sell your personal information. We may share your data with third-party vendors who perform services for us or on our behalf. We have contracts in place with these third parties to help safeguard your personal information. We currently share data with:

• Google Analytics & Google AdSense: Used for website analytics and marketing.

International Data Transfers: Because we use international service providers like Google, your data may be transferred to, and processed in, countries outside of the UK (such as the United States). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by utilizing safeguards such as the UK-US Data Bridge or Standard Contractual Clauses (SCCs).

5. Cookies and tracking technologies

We use cookies and similar tracking technologies to access or store information, analyze site traffic, and understand where our visitors are coming from. Essential cookies are required for the website to function correctly. Non-essential cookies (like those used by Google Analytics) are only dropped on your device if you provide your consent via our cookie banner. You can manage or revoke your cookie preferences at any time through your browser settings.

6. How long do we keep your information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax and accounting requirements). When we have no ongoing legitimate business need to process your personal information, we will securely delete or anonymize it.

7. How do we keep your information safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet can be guaranteed to be 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk.

8. What are your privacy rights?

Under the UK GDPR, you have rights that allow you greater access to and control over your personal information:

• The right to request access to and obtain a copy of your personal information.
• The right to request rectification or erasure of your data.
• The right to restrict the processing of your personal information.
• The right to data portability.
• The right to object to our processing of your personal data.

To exercise any of these rights, please email us at charlie@orangemoon.design. We will consider and act upon any request in accordance with applicable data protection laws. If you believe we are unlawfully processing your personal information, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. How can you contact us?

If you have questions or comments about this notice, or wish to review, update, or delete the data we collect from you, you may email us at charlie@orangemoon.design or by post to:

Orange Moon Design
8 Montague House
Stratford Upon Avon
CV37 6RA
United Kingdom