Privacy policy

1. Who I am

Shape My Visuals is a design studio run by Muarij Ullah, a sole trader based in Lahore, Pakistan. For the purposes of UK data protection law I am the data controller for the personal information described on this page.

You can reach me about anything on this page at hello@shapemyvisuals.com.

2. What this policy covers

This policy covers personal information handled in three situations.

2.1 Visiting this website

Information collected automatically when a page is served, and anything you enter into the enquiry form.

2.2 Enquiring about a project

Information you send when you ask for a quote, book a call or email the studio directly.

2.3 Working with the studio

Information exchanged while a project is live, including contact details, billing details and any material you share for use in the work.

It does not cover sites I do not operate. If a project you own links here from your own site, your own policy applies to that site.

3. What I collect

3.1 Information you give me

Your name, email address, company name where you supply one, what you told me you need, and anything else you choose to write in the enquiry form or in an email. During a project this extends to billing details, brand material, copy, images and access credentials you send me in order for the work to be done.

3.2 Information collected automatically

Standard server log data recorded when a page is requested: IP address, approximate location derived from it, browser and device type, the page requested, the referring page and the time of the request. This is used to keep the site up and to spot abuse, not to build a profile of you.

3.3 What I never ask for

I do not ask for special category data, and I do not need card details. Invoices are paid by bank transfer or through a payment provider that handles the card data itself.

4. Why I use it, and my lawful basis

I do not sell personal information, and I do not use it to advertise to you. There is no newsletter list attached to the enquiry form; if one is ever added it will be opt-in and separate.

5. Who else processes it

The studio runs on a small number of third-party services. Each one only receives what it needs to do its job, and each acts as a processor on my instructions.

Where a project needs specialist help, a freelance specialist may be given access to the material required for their part of the work. They are bound by confidentiality and work to my instructions. I will tell you if that involves anything of yours beyond ordinary project material.

Information may also be disclosed where the law requires it, or to a professional adviser where necessary to establish or defend a legal claim.

6. How long it is kept

6.1 Enquiries that do not become projects

Kept for up to 24 months, then deleted, so I have context if you come back.

6.2 Project files and correspondence

Kept for the life of the project and for six years afterwards, so I can answer questions about work I delivered and evidence what was agreed.

6.3 Accounting records

Kept for six years after the end of the relevant tax year, as UK tax law requires.

6.4 Server logs

Kept for a short rolling period by the hosting provider, then overwritten.

7. Where it is stored

Information is held in the United Kingdom and the European Economic Area where possible. Some providers listed above operate in the United States. Where information is transferred outside the UK it is done under the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an equivalent safeguard recognised by UK law.

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information I hold about you;
• ask me to correct anything inaccurate;
• ask me to delete information where there is no longer a reason to keep it;
• ask me to restrict how I use it while a concern is being resolved;
• object to processing carried out on the basis of legitimate interests;
• ask for the information you gave me in a portable format;
• withdraw consent, where consent was the basis for the processing.

Email hello@shapemyvisuals.com and I will respond within one month. There is no charge. I may ask you to confirm your identity before I release information.

9. Cookies and analytics

This site uses a small number of cookies and an aggregate usage measurement tool. What is set, why, and how to refuse it is set out in the cookie policy.

10. Definitions

Personal information

Any information that identifies you, directly or in combination with something else. Called personal data in the legislation.

Processing

Anything done with personal information, including collecting, storing, using, sharing and deleting it.

Controller

The person who decides why and how personal information is used. For this site, that is me.

Processor

A service or person that handles personal information on the controller's instructions, such as the providers listed in clause 5.

Legitimate interests

A lawful basis for processing where it is reasonably necessary for my purposes and does not override your rights.

11. Changes and complaints

11.1 Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes affecting a live project will be sent to you by email.

11.2 Complaints

If you are unhappy with how your information has been handled, email me first and I will try to put it right. You can also complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or by calling their helpline.