How we handle your data.

imaginatif is a digital agency based in North Yorkshire, working with businesses across the UK. This policy explains what data we collect when you visit imaginatif.co.uk or get in touch with us, how we use it, and the rights you have over it.

We try to collect as little data as possible. We don’t sell your information, and we don’t share it beyond the small set of services we use to run the site and respond to enquiries.

Information you give us

When you fill in the contact form, we ask for your name, email address, and a few details about your project. You can optionally include your phone number and company name. Anything you write in the message field is sent directly to us by email.

Information collected automatically

If you accept analytics cookies, we collect anonymised information about how the site is used: things like which pages people visit, how they got here, and roughly where in the world they are. This helps us understand what’s working and what isn’t. We can’t identify you personally from this data.

Essential cookies are always on. They remember your cookie choices and your preferred theme (light or dark). Without these, the site wouldn’t work properly.

We use the information you give us for two reasons:

• To respond to your enquiry. When you fill in the contact form, we read it, reply to you, and keep the email so we have a record of the conversation.
• To improve the website. If you’ve allowed analytics cookies, we look at aggregated usage data to make the site better. Nothing in this is tied back to you as an individual.

We don’t use your data for advertising, profiling, or automated decision-making. We don’t add you to a mailing list. We don’t have one.

Cookies are small files stored in your browser. We use as few as we can get away with, and we group them into three categories:

• Essential. Required for the site to function. These remember your cookie preferences and theme. Always active.
• Analytics. Set only if you accept them. We use Google Analytics 4 to collect aggregated, pseudonymous data about how the site is used (pages viewed, approximate location, device type) and Microsoft Clarity for anonymised session recordings and heatmaps. Clarity automatically masks sensitive form fields. Data from these tools helps us improve the site.
• Marketing. Set only if you accept them. We don’t currently run any marketing or advertising tools, but we may add them in future (for example, Google Ads or LinkedIn campaign measurement). When we do, they will only run if you have given Marketing consent.

You can change your choice at any time using the “Cookie preferences” link in the footer, or Open cookie preferences.

To opt out of Google Analytics across the web, you can install the Google Analytics Opt-out Browser Add-on. To opt out of Microsoft Clarity, see Microsoft’s privacy statement.

A handful of services help us run the site and reply to enquiries. Each one only sees the data it needs to do its job.

• Brevo. Delivers contact form submissions to our inbox. They process your name, email, and message in transit. See Brevo’s privacy policy.
• Google Analytics. Receives anonymised usage data, but only if you’ve allowed analytics cookies. See Google’s privacy policy.
• Microsoft Clarity. Receives anonymised session recordings and heatmap data, but only if you’ve allowed analytics cookies. Sensitive form fields are automatically masked. See Microsoft’s privacy statement.
• Cloudflare Turnstile. A small “verifying you are human” widget on the contact page that helps us tell real visitors apart from automated abuse. It checks a few technical signals from your browser (such as your IP address, user agent, and basic interaction signals) and shares them with Cloudflare for that purpose only. It runs whether or not you’ve accepted analytics cookies, because it’s essential for keeping the form usable. See Cloudflare’s privacy policy.
• Vercel. Hosts the website. Like any web host, they handle the basic technical information your browser sends to load a page.

Google, Microsoft, and Cloudflare are all based in the United States, so some technical and anonymised data is processed outside the UK under standard data protection safeguards. Brevo and Vercel both store data within the EU.

We’ll keep this list current. If we add a new service that handles your data, it’ll appear here.

We hold on to enquiry emails for as long as the conversation is active and for a reasonable period afterwards, typically up to two years, in case we need to refer back to it. After that, we delete it.

If we work together on a project, we keep the related records for as long as we need them for accounting and tax purposes (six years in the UK), then they’re removed.

Analytics data is aggregated and anonymised, and we don’t keep it indefinitely. You can ask us to delete anything we hold about you at any time.

Under the UK GDPR, you have the right to:

• Ask what data we hold about you and get a copy of it.
• Have inaccurate information corrected.
• Have your data deleted.
• Object to how we’re using it.
• Take your data to another provider (data portability).

To exercise any of these, email hello@imaginatif.co.uk and we’ll respond within a few working days. You won’t need to give a reason.

If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d much rather you came to us first, though, so we have a chance to put it right.

Questions about this policy, your data, or anything else? Email hello@imaginatif.co.uk, or use the contact form. A real person will read it and reply.