Privacy policy

1. Who is responsible

Data controller

Petal & Code Ltd, trading as Petal & Code, run by Rosie Jaeger

Company

Company number 17405589, registered in England and Wales

Registered office

71–75 Shelton Street, London WC2H 9JQ

ICO registration

ZC225137

Contact

rosie.jaeger@petalandcode.com

2. Enquiries

When you send the enquiry form on the Contact page, your details are submitted to this site’s server and saved so I can reply. That includes your name, email address, and anything you choose to tell me about your business, project, budget and timeline.

An email then lets me know a new enquiry has arrived. Enquiries are read by me.

3. Technical information

Like any website, the servers that run this site process technical information such as your IP address and browser type in order to deliver pages and protect the site from abuse. The hosting provider may keep this information in logs for a limited period, under its own retention policies.

There are no analytics, advertising or tracking scripts on this site.

4. Cookies and browser storage

This site sets no cookies of its own and stores nothing in your browser. The contact form runs a Cloudflare check to confirm a person is sending it; that check sees your IP address and browser details and is not used to track you. It is needed for the form to work, so you are not asked to consent to it.

5. How I use it

Your details are used to respond to your enquiry and, if we work together, to deliver your project. I never sell your information or share it for anyone else’s marketing, and there is no mailing list.

6. Service providers

A few companies handle data on my behalf, under contract and on my instructions:

Where information is handled outside the UK, the transfer is covered by the safeguards in each provider’s data processing terms. Data hosted in the EU is treated by UK law as adequately protected.

7. Data in client projects

This page covers this website. Data inside a site I build for your business, such as your customers’ details passing through your forms and systems, belongs to you. You are the controller and I am the processor, handling it only on your instructions, as set out in the data processing agreement we sign.

8. Legal basis

• Enquiries: my legitimate interest in replying to someone who has contacted me.
• Client work: it is needed to carry out our contract.
• Invoices and payment records: a legal obligation to keep them for HMRC.

Where I rely on legitimate interests, you can object, and I will stop unless there is a compelling reason I cannot.

9. How long I keep it

• Enquiries that do not lead to a project are deleted within 12 months.
• Project records and files are kept for a reasonable period after the project ends, in line with the Terms, and deleted or returned on request.
• Invoices and payment records are kept for six years after the end of the tax year they relate to, as HMRC requires.

When a project ends, you can ask me to delete or return anything I hold on your behalf, and I will, keeping only what the law requires.

10. Your rights

You can ask me to:

• see the information I hold about you
• correct it if it is wrong
• delete it
• pause using it while something is resolved
• give you a copy you can take elsewhere
• stop using it where I rely on legitimate interests

Email rosie.jaeger@petalandcode.com. I will respond within one month.

No decisions are made about you automatically, and there is no profiling.

If you are unhappy with how your information has been handled, you can contact me, or complain to the Information Commissioner’s Office (opens in a new tab), the UK’s data protection regulator.

11. Questions

For anything about this policy, email rosie.jaeger@petalandcode.com. For accessibility, see the accessibility statement.