How Frameworks Studio handles personal information.

Who we are

Frameworks Studio is a web design, development, and website management studio based in Manchester, United Kingdom. For the purposes of UK data protection law, we are the data controller for the personal information described in this policy when we decide why and how that information is used.

What personal data we collect

We collect only the information that is reasonably needed to run this website, respond to enquiries, and deliver our services.

• Identity and contact information such as your name, email address, company name, website URL, and any details you provide in enquiry forms or emails.
• Project and commercial information you choose to share, including service requirements, timelines, budgets, platform preferences, and business context.
• Communication records, including messages, meeting notes, and follow-up correspondence related to enquiries or active client work.
• Technical and usage information such as IP address, browser type, device information, referring pages, and similar site interaction data where this is generated through essential website logs or analytics tooling.

How we use personal data

• To respond to enquiries, provide proposals, book calls, and assess whether our services are a fit for your business.
• To communicate about projects, scopes, timelines, support requests, and service delivery.
• To manage accounts, invoices, service administration, and internal record-keeping.
• To maintain, secure, and improve our website and service operations.
• To comply with legal, regulatory, accounting, and tax obligations where these apply.

Lawful bases we rely on

Under UK GDPR, we rely on one or more of the following lawful bases depending on the context:

• Legitimate interests: to run and improve our studio website, respond to business enquiries, manage client relationships, and keep records necessary to operate responsibly.
• Contract: where processing is necessary to take steps before entering into a contract with you, or to perform a contract once services are agreed.
• Legal obligation: where we must keep certain records or disclose information to comply with applicable law.
• Consent: where we use an optional communication or non-essential technology that requires your permission.

Who we share data with

We do not sell personal data. We may share information with trusted service providers only where it is necessary to operate our website or deliver work. Depending on the project, this may include hosting providers, form handling or email providers, analytics providers, payment and accounting tools, scheduling tools, cloud storage, and collaboration platforms.

Where third-party processors handle personal data on our behalf, we expect them to do so only for the agreed purpose and with appropriate security measures.

International transfers

Some of the digital tools we use may process or store data outside the UK. Where that happens, we aim to use providers that offer appropriate safeguards for international transfers, such as recognised adequacy arrangements or contractual protections designed for UK data transfers.

How long we keep information

We keep personal data only for as long as there is a legitimate business or legal reason to do so.

• General enquiry information is typically kept long enough to respond properly, assess follow-up, and maintain a record of commercial discussions.
• Client and project records may be retained for longer where needed for service continuity, support history, legal obligations, accounting, or dispute management.
• Technical logs and analytics data are retained according to the settings of the tools used and only where there is a valid operational reason.

Cookies and analytics

This website may use essential technical functions needed for performance and security. We may also use analytics or measurement tools to understand how the site is used and how it can be improved. If non-essential cookies or similar technologies are used in a context where consent is required, we aim to handle that appropriately before those tools are activated.

Marketing communications

We do not add people to ongoing marketing lists simply because they submitted an enquiry. If we ever send optional updates or promotional communications, we will do so only where we have an appropriate legal basis and you will be able to opt out.

Security

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, misuse, or disclosure. No online system is completely risk-free, but we aim to keep the amount of personal data we handle proportionate and to use appropriate platforms and access controls.

Your rights

Depending on the circumstances, you may have the right to request access to your personal data, ask for correction, request deletion, object to certain processing, ask us to restrict processing, request transfer of data, or withdraw consent where consent is being relied on.

If you want to exercise any of these rights, contact us and we will review the request in line with applicable law.

Questions or complaints