What we collect, and why.
Short version: a contact form, an email address, and nothing else unless you say otherwise. Nothing is tracked and no cookie is set until you accept the cookie notice — and the site works perfectly well if you never do.
Last updated 27 August 2026
Who we are
Design Surrey is a design and marketing studio based at Export House, Henry Plaza, Victoria Way, Woking, Surrey GU21 6QX. We are the data controller for the information described on this page.
We are registered with the Information Commissioner's Office. You can reach us at hello@designsurrey.co.
What we collect
Only what you type into the contact form, or send us directly:
- Your name
- Your email address
- Your town, if you give it
- Whatever you write in the message field
If you email or call us, we keep that correspondence. If we quote for work, we keep the quote and the notes behind it.
Beyond what our host records to serve the page and defend against attacks, we collect nothing automatically unless you accept cookies. If you do, we see which pages you looked at before enquiring — see Cookies below. We do not run session recording or heat mapping at all, whatever you choose.
Why, and on what basis
We use it to answer you, to quote for work, and to deliver work you have asked for. The lawful basis is our legitimate interest in responding to an enquiry you sent us, and — once you are a client — performance of a contract.
If we send you anything about our own services later, it will only be because you asked us to, and every message will carry a one-click way to stop it.
How long we keep it
- Enquiries that go nowhere — twelve months, then deleted.
- Quotes and proposals — two years, in case you come back to them.
- Client records — seven years after the last invoice, because HMRC requires it.
- Anyone who asks not to be contacted — we keep the minimum needed to honour that, permanently. That is the only way we can be sure not to contact you again.
If you are a client
When we run automation, email or advertising for you, your customers' information passes through systems we operate. In that arrangement you are the data controller and we are your data processor. We sign a data processing agreement with every client before any of their customer data reaches us, and we act only on your written instructions.
Two things we will not do, whoever asks: send marketing messages to people who have not bought from you, and run outbound automated calling to a purchased list. Both breach the Privacy and Electronic Communications Regulations, and the penalties now reach the higher of £17.5 million or 4% of global turnover.
Your rights
You can ask us to show you what we hold, correct it, delete it, restrict what we do with it, or send it to you in a portable format. You can object to us processing it on the basis of legitimate interest. You can withdraw consent at any time where consent is what we relied on.
Email hello@designsurrey.co and we will respond within one month. There is no charge.
Complaints and contact
If we have got something wrong, tell us first — it is usually quicker. If you are not satisfied with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Design Surrey · Export House, Henry Plaza, Victoria Way, Woking, Surrey GU21 6QX · hello@designsurrey.co