Last updated: 12 October 2026

Privacy Policy

Two7design is a freelance graphic design business based in Scotland, UK.

We respect your privacy and are committed to protecting your personal information. This policy explains what information we collect, how we use it and your rights under UK data protection law.

1. Who we are

Two7design is responsible for the personal information collected through this website.

Website: two7design.co.uk
Contact: ad***@***********co.uk

For the purposes of UK data protection law, Two7Design is the data controller.

2. Information we collect

We may collect personal information when you contact us through our website or communicate with us about our design services.

This may include:

• Your name and email address.
• Your telephone number, if provided.
• Information included in your enquiry or correspondence.
• Business contact details and project-related information.
• Information required for invoicing and financial records.

Our website may also process technical information, such as IP addresses, browser information and website activity, for security and spam prevention.

We do not operate mailing lists or collect information through this website for marketing emails.

3. How we use your information

We use personal information to:

• Respond to enquiries about our services.
• Communicate with clients and prospective clients.
• Provide graphic design services and manage projects.
• Prepare quotations, invoices and financial records.
• Maintain the security and functionality of our website.
• Meet legal and accounting obligations.

We do not sell personal information or use information collected through our website for targeted advertising.

4. Our legal basis for processing information

Under UK GDPR, we process personal information where necessary for:

Legitimate interests: Responding to enquiries, managing business relationships and protecting our website against spam and misuse.

Contractual purposes: Providing services to clients and taking steps before entering into a contract.

Legal obligations: Maintaining financial records and meeting relevant legal requirements.

Where consent is required for a particular activity, we will obtain it separately.

5. Contact forms and website security

Our website uses Contact Form 7 to allow visitors to send enquiries directly to our email inbox.

We also use CleanTalk Anti-Spam and CleanTalk Security to help protect the website against spam, automated submissions and malicious activity.

These services may process technical information, including IP addresses, browser and device information, website activity and information submitted through contact forms.

CleanTalk Anti-Spam may also record recently visited website addresses to help identify suspicious submissions.

Information may be processed by CleanTalk as part of providing these security services.

6. Sharing your information

We may share information with trusted service providers where necessary to operate our business, including:

• Website hosting and email providers.
• Website security and anti-spam services.
• Accounting and invoicing services.

These providers may process information on our behalf in accordance with their applicable data protection arrangements.

We do not sell or share personal information with third parties for their own marketing purposes.

We may also disclose information where required by law.

7. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

• General enquiries: We retain enquiry correspondence for as long as reasonably necessary to respond, follow up on potential work and maintain appropriate business records. We periodically review information and delete it when it is no longer needed.
• Client correspondence and project records: We retain information for as long as reasonably necessary to manage our working relationships, maintain business records and deal with any subsequent queries or disputes.
• Financial records: Normally retained for at least six years, or longer where required by applicable law.

Website security information may be retained according to the settings and retention arrangements of our security providers.

8. Keeping your information secure

We take reasonable measures to protect personal information against unauthorised access, loss or misuse.

Our website uses security and anti-spam protection, and access to business information is restricted to those who need it.

Although we take appropriate precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. International data transfers

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we seek to ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.

10. Your data protection rights

Under UK GDPR, you may have the right to:

• Request access to personal information we hold about you.
• Ask us to correct inaccurate information.
• Request deletion of your information in certain circumstances.
• Object to certain uses of your information.
• Request restriction of processing.
• Request transfer of your information where applicable.
• Withdraw consent where processing relies on consent.

To exercise these rights, please contact us using the email address above.

You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO).

11. Cookies

Our website uses cookies and similar technologies primarily to support website security and spam prevention.

Further information is available in our separate Cookies Policy.

12. External websites

Our website may contain links to external websites.

We are not responsible for the privacy practices or content of websites operated by third parties.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to our website, business practices or legal requirements.

The latest version will always be available on this page.