Last updated: 12 November 2026
Who I am
Brightgrid Studio is run by Vaidas Ivanauskas, an independent web developer. I'm the “data controller” for the personal information collected through brightgridstudio.uk. If you have any questions about this policy or your information, email [email protected].
What I collect and why
| When you… | I collect | Why, and the legal basis |
|---|---|---|
| Send an enquiry through the contact form | Your name, email, business name (optional), what you need, budget (optional) and your message | To reply to you and discuss your project. Basis: your consent, and steps before entering a contract. |
| Create an account or log in | Your name, email address and a securely scrambled (hashed) password, or your Google account details if you use Google | To let you place and track orders and message me. Basis: performing our contract. |
| Place an order | The plan you chose, your business name, website, phone number (optional) and project details | To quote for, deliver and support your project, and to keep business records. Basis: contract and legal obligation (tax records). |
| Send me a message from your account | Your messages and the time they were sent | To answer your questions and provide support. Basis: performing our contract. |
| Visit the website | Your IP address, briefly, in server logs and for security checks | To keep the site secure and stop spam and attacks. Basis: legitimate interests. |
I never sell your information, and I don't use it for marketing unless you've clearly asked to hear from me.
Cookies
This site only uses essential cookies: one keeps you logged in to your account, and others protect forms against misuse. They don't track you and don't need your consent. There are no advertising or analytics cookies.
If a Trustpilot reviews widget is shown on the home page, it's provided by Trustpilot, who may set their own cookies. See Trustpilot's privacy policy.
Who helps me run the site
I use a small number of trusted services to run the website. They only process your information on my instructions:
- Hostinger: hosts the website and its database (UK/EU servers).
- Cloudflare: protects the site from attacks and forwards emails sent to my addresses.
- Resend: sends emails from the website, such as order updates and login links.
- Google: only if you choose “Continue with Google” to log in.
- Trustpilot: only if you choose to leave or read a review there.
Some of these companies may process data outside the UK. When they do, they use approved safeguards (such as the UK International Data Transfer Agreement or standard contractual clauses) to protect it.
How long I keep it
- Enquiries that don't lead to a project: up to 12 months, then deleted.
- Accounts and messages: while your account is open. You can ask me to delete it at any time.
- Orders and invoices: 6 years after the end of the tax year, as required by UK tax law.
- Security logs: a few weeks at most.
Keeping it safe
The site uses encrypted connections (HTTPS), passwords are stored hashed (never in plain text), logins are protected against guessing, and only I can access the admin area. Backups are stored securely.
Your rights
Under UK data protection law (UK GDPR) you can ask me to:
- give you a copy of the information I hold about you
- correct anything that's wrong
- delete your information (unless I have to keep it, for example for tax records)
- limit how I use it, or object to me using it
- give your information to you, or another provider, in a common format
- withdraw your consent at any time, where I rely on consent
Just email [email protected]. I'll reply within one month, and it's free.
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
If I make important changes, I'll update the date at the top of this page. See also my Terms of Service.