Privacy Policy
This policy explains what personal information Afresco Web Studio collects, why we collect it, how long we keep it and what your rights are under UK data protection law.
1. Who we are
Afresco Web Studio ("Afresco", "we", "us") designs, redesigns and looks after websites for small businesses. Afresco is run by Ludmila Alcuri, who is the controller of the personal information described in this policy. Business registration: CNPJ 36.938.613/0001-11.
You can contact us about privacy at [email protected].
2. What we collect
We only collect information that you give us or that is needed to run a project:
- Enquiries: your name, business name, current website, email address and anything you write in our quote form or emails.
- Calls: if you book a call, your name, email address and the time you choose.
- Projects: the content and materials you send for your website, such as text, images and logos, and the contact details we need to work with you.
- Payments: the name and payment reference shown on your bank transfer, and the invoices we issue. We never see or store your card details.
Please do not send us sensitive information, such as health details, through the form or by email.
3. If we emailed you first
We sometimes contact businesses by email to offer our services. When we do, we use business contact details that are publicly available, for example on a company website, a Google Business Profile or a trade directory. We record the business name, the contact name and email address, where we found them and whether you replied.
We do this on the basis of our legitimate interest in telling businesses about a service that may be relevant to them. Every email we send tells you how to opt out. If you reply asking us to stop, or email [email protected], we will not contact you again and will keep only the minimum needed to make sure of that.
4. How we use your information
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and prepare a quote | Steps taken at your request before entering a contract |
| Design, build, publish and look after your website | Performance of our contract with you |
| Issue invoices and keep financial records | Legal obligation |
| Contact businesses about our services | Legitimate interests (see section 3) |
| Keep our website and email working and secure | Legitimate interests |
We do not sell your information, use it for advertising or make automated decisions about you.
5. Who we share it with
We share information only with services that help us run the business, and only what each one needs:
- our email provider, to send and receive messages;
- our form service, to deliver messages sent through the quote form;
- our booking tool, if you book a call;
- Wise, which provides our bank account for payments in pounds sterling;
- the company that hosts our website;
- professional advisers, such as an accountant, where needed.
Our website loads its fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when you visit.
We may also disclose information if the law requires it.
6. Where your information is stored
Afresco is operated from outside the UK, so information you send us is processed outside the UK, including in Brazil, and some of the services listed above may store data in other countries. Where this happens we use providers that apply recognised safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and we keep the information secure with access limited to Afresco.
7. How long we keep it
- Enquiries that do not lead to a project: up to 12 months after our last contact.
- Outreach records: up to 12 months, except opt-out requests, which we keep so that we do not contact you again.
- Client projects and invoices: for as long as tax and accounting law requires, usually six years after the project ends.
- Website files: while we host or look after your site, then deleted or returned to you.
8. Cookies
Our website does not use cookies for analytics or advertising, and it does not track you across other sites. If we add analytics in future, we will update this policy and ask for your consent before setting any non-essential cookies.
Booking tools and other services we link to have their own cookie and privacy policies.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct anything that is wrong or incomplete;
- ask us to delete your information;
- object to us using your information, including for direct marketing, at any time;
- ask us to restrict how we use it, or to send it to you or another organisation in a portable format.
To use any of these rights, email [email protected]. We will reply within one month. There is normally no charge.
10. Contact and complaints
If you have a question or concern about how we handle your information, please email [email protected] first and we will do our best to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
We will update this policy when the way we handle information changes. The date at the top shows when it was last revised.