Lytton Studio

Who we are

This policy explains what personal data we collect when you visit lyttonstudio.co.uk, why we collect it, and what we do with it.

What information we collect

Contact form

When you use the contact form on this site, we collect:

• Your name
• Your email address
• Your organisation (optional)
• Your message

This information is used only to respond to your enquiry. We do not add you to any mailing list, and we do not pass your details to any third party.

Email

If you contact us directly by email at hello [at] lyttonstudio.co.uk, we will hold your email address and message content in order to respond to you. Email addresses on this site are obfuscated to protect against automated harvesting by bots.

Analytics — Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors use this site. GA4 collects anonymised data including pages visited, time on site, scroll depth, and approximate location (country and region level). GA4 uses your IP address only to derive a general location, then permanently discards it — your IP address is never stored or logged.

Town or city level data may appear in our reports, but this is approximate only — derived from IP geolocation, which is frequently inaccurate at that level of detail. It is not linked to any contact form submission or identifiable individual.

You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on. Google's privacy policy: policies.google.com/privacy.

Heatmaps and session analytics — ContentSquare (Hotjar)

We use ContentSquare (which incorporates Hotjar) to collect anonymised data about how visitors interact with this site — including heatmaps, scroll patterns, and session recordings. No personally identifiable information is collected through this tool. ContentSquare's privacy policy: contentsquare.com/privacy-center.

Our legal basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Legitimate interest — for analytics and website improvement
• Contract / pre-contractual steps — for responding to your enquiries

Consent

Where we rely on consent to process your data (for example, analytics cookies), we will ask for your agreement before collecting that data. Consent is:

• Freely given — you are not required to consent to use this site
• Specific — we tell you exactly what you are consenting to
• Informed — this policy explains how data is used
• Withdrawable — you can withdraw consent at any time (see Cookies section below)

Contact form submissions are processed on the basis of your taking a deliberate action to send us a message — this constitutes a pre-contractual step under UK GDPR and does not require separate consent.

How we protect your data

We take reasonable technical and organisational measures to keep your personal data secure, including:

• HTTPS encryption across the entire site
• Contact form bot and spam protection
• Email address obfuscation to reduce harvesting by automated systems
• No storage of personal data in unsecured locations

No internet transmission is ever completely secure, but we take appropriate steps proportionate to the nature of the data we hold.

Cookies

Cookies are small text files placed on your device by a website. This site uses cookies for analytics purposes only. We do not use advertising cookies, social media tracking cookies, or cookies linked to personal profiles.

Cookies we use

Your consent

Analytics cookies require your consent. When you first visit this site, a banner gives you the option to accept or decline non-essential cookies. Until you click Accept, only anonymous, non-identifiable data may be collected. Full analytics tracking begins only after you give consent. You can change your preference at any time.

To withdraw consent or opt out of analytics cookies:

• Google Analytics: use the GA opt-out browser add-on
• ContentSquare / Hotjar: visit ContentSquare privacy centre
• Your browser settings: most browsers let you block or delete cookies — see your browser’s help pages for guidance

Declining analytics cookies will not prevent you from using this site. No site functionality depends on them.

How long we keep your data

• Contact form and email enquiries — we retain correspondence for up to 2 years, or as long as necessary to fulfil or follow up on your enquiry.
• Analytics data — governed by the data retention settings of Google Analytics and ContentSquare respectively. We do not retain raw analytics data ourselves.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Object to or restrict how we process your data
• Receive a copy of your data in a portable format (data portability)
• Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, please contact us at hello [at] lyttonstudio.co.uk.

You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Third parties and data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. The only third parties who may process data collected via this site are:

• Google LLC — for analytics (GA4)
• ContentSquare / Hotjar — for heatmaps and session analytics

Both are bound by their own privacy policies and comply with UK GDPR data transfer requirements.

External links

This site contains links to external websites, including LinkedIn. Once you leave lyttonstudio.co.uk, this privacy policy no longer applies. We recommend you review the privacy policy of any site you visit.

Changes to this policy

We may update this policy from time to time. The date at the top of this page will always reflect when it was last revised. Significant changes will be flagged clearly.

Questions about this policy?

Please reach us at hello [at] lyttonstudio.co.uk and we will respond as promptly as we can.

Data controller: Lytton Studio is the trading name of Lytton Ecosystems Ltd, registered in England and Wales. Company number 17170892. Kate Broadfield (Director) is the data controller for this website and the personal data collected through it. For formal data protection correspondence, contact hello [at] lyttonstudio.co.uk.