Wingit Creative Services - Privacy Policy
Last updated: 21 September 2026
1. Who we are
This Privacy Policy explains how Jonathan David Shepherd, trading as Wingit Creative Services (“Wingit Creative Services”, “I”, “we” or “us”) collects, uses and protects personal information.
Wingit Creative Services provides website design, graphic design, photography, video production, video editing, SEO and related creative services.
If you have any questions about this Privacy Policy or how your information is handled, please contact:
Email: jonny@wingitcreative.co.uk
Postal address:
1 Gibside Court
Gateshead
NE11 9PT
United Kingdom
2. Information we collect
Depending on how you interact with Wingit Creative Services, we may collect the following information.
Information submitted through website forms
This may include:
First and last name.
Business or organisation name.
Email address.
Telephone number.
Current website address.
Website project requirements.
Intended audience and project goals.
Required pages and functionality.
Branding and design preferences.
Budget and anticipated launch date.
Support requirements.
Any other information included in your message.
Our general contact form may collect your first name, last name, email address, subject and message.
Information submitted through website forms is sent to our business email address, jonny@wingitcreative.co.uk. Depending on the website’s configuration, Squarespace may also store form submissions within its systems.
Information provided during client work
We may receive information necessary to deliver services, including:
Client contact details.
Business and organisational information.
Website and hosting access details.
Information relating to client websites, storage systems, databases and other platforms.
Content, images, documents and other project materials.
Information supplied by clients for use in websites, marketing materials, photography or video projects.
The nature of this information depends on the services requested and the instructions provided by each client.
3. How we use your information
We use personal information to:
Respond to enquiries.
Discuss and prepare proposals for projects.
Deliver agreed services.
Communicate with clients.
Manage ongoing support and maintenance.
Manage invoices, payments and business administration.
Maintain records of our business relationships.
Protect the security of our systems and client information.
Improve our website and services.
Comply with legal and regulatory obligations.
We do not use enquiry information to send unsolicited newsletters or promotional emails.
4. Lawful basis for processing
Where applicable, we process personal information using one or more of the following lawful bases.
Contract
Processing information when necessary to take steps towards entering into a contract or to fulfil an existing contract for services.
Legitimate interests
Processing information where reasonably necessary to operate our business, respond to enquiries, manage client relationships, deliver services, maintain appropriate business records and protect our legitimate business interests.
We consider the impact on individuals before relying on legitimate interests and avoid using this basis where our interests are overridden by an individual’s rights and freedoms.
Legal obligation
Processing information where necessary to comply with legal, accounting or regulatory requirements.
Consent
Processing information where consent is required, such as for certain non-essential cookies.
Where processing is based on consent, you may withdraw that consent at any time.
The appropriate lawful basis depends on the particular circumstances and the information being processed.
5. Client information and data processing
When delivering services, Wingit Creative Services may access or process personal information held within a client’s website, database, storage system or other platform.
Depending on the activity:
Wingit Creative Services may act as a data controller when determining why and how information is processed for its own business purposes.
Wingit Creative Services may act as a data processor when handling personal information on a client’s documented instructions and on the client’s behalf.
The applicable role depends on the specific processing activity, rather than simply whether we have access to a particular system.
Where we act as a data processor, processing will be governed by the relevant client agreement and, where applicable, a separate Data Processing Agreement.
We will take appropriate measures to protect the information and follow the client’s lawful instructions.
6. How we store and protect information
We take reasonable and appropriate technical and organisational measures to protect personal information and client-related information against unauthorised access, accidental loss, misuse or disclosure.
These measures may include:
Password protection and access controls.
Apple Passwords for managing login credentials.
Two-factor authentication where available.
Device security.
Restricting access to information where appropriate.
Secure backups of files and devices.
Reviewing and removing unnecessary access where practicable.
Client login details are managed primarily using Apple Passwords. We aim to avoid retaining credentials in ordinary text files and to use individual accounts and the minimum necessary access wherever possible.
No method of electronic storage, transmission or backup can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will assess the situation and take appropriate action in accordance with applicable legal requirements and our contractual obligations.
7. Where information is stored and the services we use
We use third-party services to support our business operations. These may include:
Squarespace
We use Squarespace for website hosting, website functionality and certain website-related services.
Squarespace may process information submitted through website forms and information associated with website visitors.
Google services
We use Google services for email, business administration, Google Contacts and Google Search Console.
Client and business contact details may be stored in Google Contacts for communication and business administration purposes.
Google Search Console is used to help us understand how our website appears in Google search results and to identify potential search-related issues.
We do not currently use Google Analytics.
Backblaze
Project files and business data may be backed up using Backblaze’s cloud backup service.
Backups are used to support business continuity and recovery from accidental loss, equipment failure or other data-loss events.
Apple Passwords
We use Apple Passwords to manage login credentials and other relevant security information.
These services may process or store information in countries outside the United Kingdom. Where applicable, we rely on appropriate safeguards for international transfers in accordance with relevant data protection requirements.
8. Retention of information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
Responding to enquiries.
Providing services and ongoing support.
Maintaining appropriate business and financial records.
Resolving disputes or enforcing agreements.
Meeting legal, accounting or regulatory requirements.
Protecting our legitimate business interests.
We use a flexible, criteria-based approach to retention rather than applying one fixed period to all information.
Retention may depend on:
The type and sensitivity of the information.
The nature of the client relationship.
Ongoing support requirements.
Contractual obligations.
Legal and regulatory requirements.
Whether the information remains necessary.
The potential need to establish, exercise or defend legal claims.
We periodically review information and aim to delete or securely dispose of information that is no longer required, where practical and appropriate.
Project files and backups may remain for longer where necessary for business continuity, contractual purposes, legal obligations or recovery from data loss.
Where we process information on behalf of a client, retention and deletion will also be determined by the client’s instructions and applicable contractual arrangements.
9. Sharing information
We do not sell personal information.
We may share information where reasonably necessary with:
Service providers that support our business operations.
Website hosting, email, backup and software providers.
Professional advisers, where required.
Legal, regulatory or law-enforcement authorities where legally required.
A client or other authorised person where necessary to deliver agreed services.
Where we use third-party service providers, we seek to ensure that information is handled appropriately and protected through suitable contractual or other safeguards where required.
We do not share personal information for unrelated marketing purposes.
10. Cookies and website analytics
This website uses cookies and similar technologies, including those required for website functionality.
We use the analytics functionality provided through Squarespace to help us understand website performance and visitor activity.
Non-essential cookies are restricted unless the visitor provides appropriate consent through the website’s cookie settings.
The Squarespace Activity Log is not enabled.
We do not currently use Google Analytics.
For further information, please see our Cookie Policy.
11. External links
This website may contain links to external websites, platforms or services.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policies of any external websites you visit.
12. Your rights
Depending on the circumstances and the applicable lawful basis, you may have rights under data protection law, including the right to:
Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of information where applicable.
Request restriction of processing.
Object to certain processing.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
To exercise a right, please contact:
We may need to verify your identity before responding to a request.
Some rights are subject to legal conditions and exemptions, meaning they may not apply in every situation.
13. Complaints
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
14. Automated decision-making
We do not use personal information to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on individuals.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal requirements or data-handling practices.
The latest version will be published on this page, with the revision date shown at the top.
We recommend reviewing this policy periodically to remain informed about how we handle personal information.
16. Contact
For questions about this Privacy Policy or the information we hold about you, please contact:
Jonathan David Shepherd
Trading as Wingit Creative Services
Email: jonny@wingitcreative.co.uk
Postal address:
1 Gibside Court
Gateshead
NE11 9PT
United Kingdom