Privacy policy

Who we are

This website is run by Kanvass Projects Limited (“Kanvass”, “we”), 86-89 Paul Street, London, EC2A 4NE. We are the controller of the personal information described here. You can contact us about anything in this policy at Tris@kanvass.co.uk or 0203 627 1679.

What information we collect

Information you give us. If you contact us, by email, phone or through the website, we collect what you tell us, such as your name, email address, telephone number and details of your project.

Information collected automatically. If you accept analytics cookies, Google Analytics records how you use the site, such as the pages you visit, roughly where you are, your device and browser type, and how you arrived. If you decline, no analytics data is collected. Our hosting provider also keeps standard server logs, such as IP address and pages requested, for security and to run the site.

How and why we use it

To reply to your enquiry and discuss your project. Our lawful basis is our legitimate interest in answering people who contact us, and, where you ask us to, taking steps before entering a contract.

To understand and improve the website, using analytics. Our lawful basis is your consent, which you can withdraw at any time.

To keep the website secure and working. Our lawful basis is our legitimate interest.

We do not sell your personal information, and we do not use it for automated decision-making.

Cookies

The site uses one optional group of cookies: Google Analytics, which sets cookies to tell visitors apart and measure use of the site. It only loads after you click Accept on the banner. If you click Decline, it does not load.

We remember your choice in your browser so we do not ask again. To change your mind, clear this site’s data in your browser settings and the banner will reappear.

Who we share it with

We use a small number of service providers to run the site and our business. They process information on our behalf: Vercel (website hosting), Google (analytics, only if you accept), and our email provider (Microsoft 365). We may also share information where the law requires it.

Some of these providers are based outside the UK, including in the United States. Where that happens we rely on appropriate safeguards, such as the UK data bridge or standard contractual clauses.

How long we keep it

Enquiries and related correspondence are kept for as long as needed to deal with your request and any resulting work, and then for up to six years for legal and accounting purposes, unless you ask us to delete them sooner and we are able to. Google Analytics data is kept for the retention period set in our account, currently up to 14 months.

Your rights

You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, to ask for it in a portable format, and to withdraw consent at any time. To use any of these rights, contact us using the details above.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes to this policy

We may update this policy from time to time. The date below shows when it was last changed.