The human version
- We only collect what we need to run this website, answer your enquiry and do the work you ask us to do.
- This site uses no tracking or advertising cookies and no analytics that follow you around.
- We don’t sell your information, and we only share it with the few services that help us run the site and reply to you.
- Where we run a client’s social media, we also handle the comments and messages their channels receive — for them, on their instructions.
- You can ask to see, correct or delete what we hold about you at any time.
This summary is here to make things easier to follow. The full text below is the version that applies.
How your data moves
- YouGet in touch through the form or by email.
- Purple ImpWe read it, reply and keep it safe on our own server.
- Trusted servicesHosting, delivery and email providers that help us reply to you. Nobody else sees your enquiry.
We collect it for a reason. We protect it. We don’t flog it.
Who we are
This website is run by Cerulean Daze Studios Ltd, trading as Purple Imp (“Purple Imp”, “we”, “us”). We’re the data controller for the personal information described here.
Cerulean Daze Studios Ltd, trading as Purple Imp
Registered in Scotland, company number SC784049
4 Valentine Court, Dundee Business Park, Dundee DD2 3QB
Email: tig@purpleimp.com
What we collect
When you contact us through the form: your name and email address, and anything else you choose to give us — company, phone number, what you’re looking for, timeline, budget, your message and any files you attach.
Alongside a form submission we keep your browser’s user-agent string and a one-way, keyed hash of your IP address. We use these only to stop spam and abuse; the hash can’t be turned back into your IP address.
When you email or call us: whatever you send or tell us.
When you visit the site: like every website, our servers and our content delivery network record basic technical details of each request — IP address, the page requested, the date and time, and your browser type. We use these to keep the site running and secure, not to profile you.
We don’t use analytics cookies, advertising trackers or social media pixels.
How we use it, and why we’re allowed to
- To reply to your enquiry and talk about working together. Our lawful basis is our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.
- To do the work you hire us for. Lawful basis: performance of our contract with you.
- To keep the site secure and stop spam. Lawful basis: our legitimate interest in protecting the site and our inbox.
- To keep records we’re legally required to keep, such as invoices. Lawful basis: legal obligation.
We don’t use your information for automated decision-making, and we won’t add you to a marketing list from a website enquiry.
Free guides and our emails
When you ask for one of our free guides, we keep your email address, the first name you give us (if any), the exact wording you agreed to, and when you signed up and confirmed. Alongside that we keep your browser’s user-agent string and a one-way, keyed hash of your IP address, to stop abuse.
We send you an email asking you to confirm your address first. Only once you’ve confirmed do we send the guide, and from then on occasional emails with tips and new guides from Purple Imp. Our lawful basis is your consent, which you give by ticking the box, and you can withdraw it at any time: every email has an unsubscribe link, or just reply and ask. We’ll also see your name and email address so we can tell which businesses are reading the guide.
The emails are sent through Postmark. We don’t sell or share the list with anyone else, and we don’t track whether you open our emails or click their links. If you never confirm your address, we delete it within 30 days. If you unsubscribe, we keep only a record that you did, so we never email you again by mistake.
When we run social media for a client
Some of our clients ask us to run their social media channels. When we do, we publish their approved posts to their own Facebook, Instagram and X accounts from our own scheduling tool, and we collect the comments and messages those accounts receive so that somebody replies to them.
For that information the client is the data controller and we are their processor. It’s their channel and their audience; we act on their instructions, under a contract with them. If you’ve commented on or messaged one of our clients’ accounts and you want to know what’s held, or ask for it to be deleted, contact that business. If it’s easier to come to us, email tig@purpleimp.com and we’ll pass it on and act on their instruction.
What we collect from those channels is what the platform shows us: the display name and account identifier of the person who commented or messaged, what they wrote, when they wrote it, and a link back to it. We also record which of our team replied, and when. We collect nothing else about you, we don’t combine it with anything from this website, and we never use it to advertise to you.
Photographs and video that a client’s staff send us for posting may show identifiable people. We ask the person uploading to confirm they have permission for anything recognisable, and we look at every frame ourselves before anything is published.
Short links. Links in our clients’ posts go through our own short-link domain so we can count how many people followed them. We record the date, the channel and the website the click came from. We don’t store your IP address or your browser’s user-agent string — only a one-way hash that can’t be reversed and can’t be matched to you on another day.
The platforms themselves — Meta, for Facebook and Instagram, and X — are separate controllers for what they hold, under their own policies.
Who we share it with
We use a small number of trusted suppliers who process information on our behalf, under contracts that require them to protect it:
- netcup GmbH (Germany) — the server this website and its database run on.
- BunnyWay d.o.o. / Bunny.net (Slovenia) — content delivery, DNS, website firewall and the web fonts on this site.
- Postmark (ActiveCampaign, USA) — delivers form submissions to our inbox.
- Google Workspace (Google) — our email.
- Meta Platforms (Facebook and Instagram) and X Corp — where we run a client’s social media, we send that client’s approved posts to their own accounts on these platforms, and read back the comments and messages those accounts receive.
We don’t sell your information, and we don’t share it with anyone else unless the law requires us to.
International transfers
Some of these suppliers are based outside the UK or process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses.
How long we keep it
- Enquiries and attached files: for as long as we’re talking, then for up to two years so we have the context if you get back in touch, unless you ask us to delete them sooner.
- Client records: for the length of our working relationship and then for as long as the law requires (for example, six years for accounting records).
- Free-guide sign-ups: until you unsubscribe, and deleted within 30 days if you never confirm your address.
- Comments and messages on a client’s social channels: up to 24 months from the date of the message, then deleted automatically — whether or not anyone replied. If a client stops working with us, deleted when the engagement ends.
- Instagram posts that tagged a client: up to 12 months, then deleted. We keep a record of any we actually published, and that we had permission to, for as long as the post exists.
- Photographs and video sent to us for posting: for the length of the client engagement, then returned or deleted.
- Short-link click records: up to 24 months. They identify nobody.
- Server logs: up to 14 days. Our content delivery network keeps its request logs for a few days.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct anything that’s wrong;
- ask us to delete your information;
- object to or ask us to restrict how we use it;
- ask for your information in a portable format;
- withdraw consent, where we rely on it.
To use any of these rights, email tig@purpleimp.com. It’s free, and we’ll reply within one month. We may need to confirm who you are first.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk.
How we protect it
The site is served only over HTTPS, sits behind a web application firewall, and runs on servers we manage and keep patched. Enquiries and uploaded files are stored outside the public part of the website, and access is limited to the people who need it.
Children
This site isn’t aimed at children and we don’t knowingly collect information from anyone under 13.
Changes to this policy
If we change how we handle personal information we’ll update this page and the date at the top. The latest version is always the one that applies.