Privacy Policy
Last updated: 2 October 2026
Who is responsible for your information?
I’m Thomas Rowe, a sole trader trading as Rowe Creative. I’m responsible for the personal information described in this notice. You can contact me about your information, your rights or a privacy complaint at tom@rowecreative.co.uk.
This notice covers the Rowe Creative website, enquiries and the information I use to manage my business and client relationships. Where I handle someone’s information only on a client’s instructions, that client is responsible for explaining its use in their own privacy notice.
What information do I collect?
The contact form asks for your name, email address, the service you’re interested in and your message. Your business name and phone or WhatsApp number are optional. You can also contact me directly by email or WhatsApp. Your enquiry is sent to my Rowe Creative mailbox; sending it does not sign you up to a newsletter.
If we work together, I may also hold project requirements, correspondence, proposals, approvals, invoices, payment records and the files or account access needed for the agreed work. Please don’t send passwords, payment-card details or sensitive personal information through the enquiry form.
The website and its providers may receive technical information such as your IP address, browser, device and requested pages to deliver the site, prevent spam and investigate problems. I may also receive business contact information through referrals, public business websites or the organisation you work for.
How do I use it?
I use enquiry details to reply, understand what you need and prepare a proposal. Where you are asking about a contract with me, the legal basis is taking steps at your request before entering that contract. For business contacts and general enquiries, I rely on my legitimate interest in responding to people and running the business.
I use client information to deliver the agreed work and provide support, relying on the contract and my legitimate interest in managing projects and keeping an accurate record of decisions. Financial and tax records are also kept to meet legal obligations.
I use technical information for my legitimate interest in keeping the website and communications secure and reliable. I may retain relevant records where needed to handle a complaint or establish, exercise or defend legal rights.
If I send marketing that requires your consent, I’ll ask separately. You can object to direct marketing at any time. I don’t sell personal information, and I don’t make solely automated decisions that have legal or similarly significant effects on people.
Who helps process your information?
The site runs on WordPress with Hostinger hosting and WPForms for the enquiry form. Form notifications are delivered by email to tom@rowecreative.co.uk, using the hosting and business-email services involved in delivery. I also use digital storage, project tools and professional advisers where needed to manage the business and agreed work.
Google Fonts supplies the website’s fonts, and Elfsight displays public client reviews on the homepage. These services receive technical information when their resources load. Elfsight says it uses IP address, operating-system and browser information for security and troubleshooting, retaining that information for seven days. Its service also describes a cookie used to prevent inflated review-widget view counts.
WhatsApp and social-media links take you to services with their own privacy notices. Only use those routes if you are comfortable with their terms. I may share information with an authorised project collaborator or adviser where necessary, or with public authorities where required by law.
I use software, automation and AI-assisted tools to support work such as drafting, coding, design and organisation. I review the work and aim to avoid putting unnecessary personal or confidential information into these tools. Client data handled on a client’s behalf must stay within the agreed processing arrangements.
Providers and international processing
Some technology providers operate internationally and may process information outside the UK, including in the EEA and the United States. The protection arrangements depend on the service and destination. Hostinger and Google publish data-processing terms that include provisions for international transfers, including standard contractual clauses and UK transfer provisions where applicable. You can ask me for information about the safeguards relevant to your data.
The provider notices and terms below give more detail about their processing. They do not replace my responsibility for the information I use.
Hostinger data-processing terms
Cookies and website features
The site uses technical features to operate WordPress, protect the enquiry form and display content. Embedded reviews and other third-party resources may use their own browser storage or cookies. You can manage cookies in your browser, although blocking some features may affect how they work.
Google Analytics measurement is not currently enabled on the public website. If optional analytics or other tracking is added, this notice and the relevant choices will be updated before it is used. Non-essential storage or access will need consent unless a specific legal exception applies and its conditions are met.
How long do I keep information?
I keep information for as long as it is needed for the reason it was collected, rather than applying one period to everything. For an enquiry, this depends on whether the conversation is still active and whether there is a reasonable need to follow it up. For client work, I consider the project, ongoing support, agreed handover arrangements and the need to keep a record of approvals or resolve a dispute.
Invoices and other financial records are kept for applicable tax and accounting requirements. Access to client systems should last only as long as the authorised work or support requires it. Technical logs and backups follow the provider’s settings and the need to maintain or recover the service. Deleted information may remain in backups until those copies are overwritten.
Where you ask not to receive marketing, I may keep the minimum record needed to respect that request. You can ask me about the retention of your own information or request its deletion, subject to any legal reason it needs to be kept.
Your choices and rights
You don’t have to send an enquiry. If you do, I need enough information to understand it and reply; without contact details I may not be able to help. Optional fields are labelled on the form.
Depending on the circumstances, you can ask to access your personal information, correct it, delete it, restrict its use or receive a portable copy. Where processing relies on consent, you can withdraw that consent without affecting the lawfulness of earlier processing.
You have the right to object to direct marketing at any time. You can also object to processing based on legitimate interests. Email tom@rowecreative.co.uk to make a request. I may need to confirm your identity, and some rights can be limited by legal duties or other people’s rights.
If you have a concern
Please email tom@rowecreative.co.uk if you have a question or complaint about how I use your information. I’ll acknowledge a data-protection complaint within 30 days, look into it, keep you informed where needed and respond with the outcome without undue delay.
You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/ or on 0303 123 1113. You don’t have to contact me first to use that right.
Keeping this notice up to date
I’ll update this notice if the services or the way information is used changes. The date at the top shows when it was last updated.