The human version
- We only collect what we need to run this website, answer your enquiry and do the work you ask us to do.
- This site uses no tracking or advertising cookies and no analytics that follow you around.
- We don’t sell your information, and we only share it with the few services that help us run the site and reply to you.
- You can ask to see, correct or delete what we hold about you at any time.
This summary is here to make things easier to follow. The full text below is the version that applies.
How your data moves
- YouGet in touch through the form or by email.
- Purple ImpWe read it, reply and keep it safe on our own server.
- Trusted servicesHosting, delivery and email providers that help us do that. Nobody else.
We collect it for a reason. We protect it. We don’t flog it.
Who we are
This website is run by Cerulean Daze Studios Ltd, trading as Purple Imp (“Purple Imp”, “we”, “us”). We’re the data controller for the personal information described here.
Cerulean Daze Studios Ltd, trading as Purple Imp
Registered in Scotland, company number SC784049
4 Valentine Court, Dundee Business Park, Dundee DD2 3QB
Email: tig@purpleimp.com
What we collect
When you contact us through the form: your name and email address, and anything else you choose to give us — company, phone number, what you’re looking for, timeline, budget, your message and any files you attach.
Alongside a form submission we keep your browser’s user-agent string and a one-way, keyed hash of your IP address. We use these only to stop spam and abuse; the hash can’t be turned back into your IP address.
When you email or call us: whatever you send or tell us.
When you visit the site: like every website, our servers and our content delivery network record basic technical details of each request — IP address, the page requested, the date and time, and your browser type. We use these to keep the site running and secure, not to profile you.
We don’t use analytics cookies, advertising trackers or social media pixels.
How we use it, and why we’re allowed to
- To reply to your enquiry and talk about working together. Our lawful basis is our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.
- To do the work you hire us for. Lawful basis: performance of our contract with you.
- To keep the site secure and stop spam. Lawful basis: our legitimate interest in protecting the site and our inbox.
- To keep records we’re legally required to keep, such as invoices. Lawful basis: legal obligation.
We don’t use your information for automated decision-making, and we won’t add you to a marketing list from a website enquiry.
Who we share it with
We use a small number of trusted suppliers who process information on our behalf, under contracts that require them to protect it:
- netcup GmbH (Germany) — the server this website and its database run on.
- BunnyWay d.o.o. / Bunny.net (Slovenia) — content delivery, DNS, website firewall and the web fonts on this site.
- Postmark (ActiveCampaign, USA) — delivers form submissions to our inbox.
- Google Workspace (Google) — our email.
We don’t sell your information, and we don’t share it with anyone else unless the law requires us to.
International transfers
Some of these suppliers are based outside the UK or process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses.
How long we keep it
- Enquiries and attached files: for as long as we’re talking, then for up to two years so we have the context if you get back in touch, unless you ask us to delete them sooner.
- Client records: for the length of our working relationship and then for as long as the law requires (for example, six years for accounting records).
- Server logs: up to 14 days. Our content delivery network keeps its request logs for a few days.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct anything that’s wrong;
- ask us to delete your information;
- object to or ask us to restrict how we use it;
- ask for your information in a portable format;
- withdraw consent, where we rely on it.
To use any of these rights, email tig@purpleimp.com. It’s free, and we’ll reply within one month. We may need to confirm who you are first.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk.
How we protect it
The site is served only over HTTPS, sits behind a web application firewall, and runs on servers we manage and keep patched. Enquiries and uploaded files are stored outside the public part of the website, and access is limited to the people who need it.
Children
This site isn’t aimed at children and we don’t knowingly collect information from anyone under 13.
Changes to this policy
If we change how we handle personal information we’ll update this page and the date at the top. The latest version is always the one that applies.